---
title: "Test Exploit Prevention installation"
slug: "test-exploit-prevention-installation-4"
tags: ["Install and Get Started", "ENS 10.7.x"]
updated: 2026-10-06T16:26:22Z
published: 2026-10-06T16:26:22Z
canonical: "docs.trellix.com/test-exploit-prevention-installation-4"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Test Exploit Prevention installation

From the policy, enable Exploit Prevention and update signature 50001 with block and report access. Apply the policy to the client machine.

 
 

## Task

1. Run the command to check if Exploit Prevention is enabled or disabled. 
  
  
 <kbd>./mfetpcli --getepstatus</kbd>
2. To check the status of signatures, run: 
  
  
 <kbd>./mfetpcli --getallepsignatures</kbd> 
  
  
 

> [!NOTE]
> Note
> 
> Block and report status for signature ID 50001 should be shown as enabled.
3. Use this command to check violation of the rule: 
  
 <kbd> touch/usr/bin/watchbog</kbd>

 
 

## Results

 You will see permission denied as the 
 **Block** status is enabled. And the event is reported to ePO.