---
title: "Test Exploit Prevention installation"
slug: "test-exploit-prevention-installation-2"
tags: ["ENS 10.7.x", "Install and Get Started"]
updated: 2026-10-06T16:09:45Z
published: 2026-10-06T16:09:45Z
canonical: "docs.trellix.com/test-exploit-prevention-installation-2"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Test Exploit Prevention installation

From the policy, enable Exploit Prevention and update signature 50001 with block and report access. Apply the policy to the client machine.

1. Run the command to check if Exploit Prevention is enabled or disabled.

`./mfetpcli --getepstatus`
2. To check the status of signatures, run:

`./mfetpcli --getallepsignatures`

> [!NOTE]
> Note
> 
> Block and report status for signature ID 50001 should be shown as enabled.
3. Use this command to check violation of the rule:

`touch/usr/bin/watchbog`

You will see permission denied as the **Block** status is enabled. And the event is reported to ePO.