The integration between the Manager and ePO - On-prem server is performed with the help of an extension file, which needs to be installed on the ePO - On-prem server. You can download the extension file from the Manager. Before you configure ePO - On-prem server settings, follow the steps mentioned in Install Trellix IPS extension file in ePO - On-prem to install the extension file on the ePO - On-prem server. Following this, you need to configure ePO - On-prem server settings on the Manager.
To integrate the Manager with ePO - On-prem, perform the following steps:
Navigate to → → → → .
The ePO Integration page is displayed.
Enable the required options for ePO - On-prem integration.
(Optional) Select the checkbox for the Enable Endpoint Lookup? option.
(Optional) Select the checkbox for the Enable Endpoint Tagging? option.
This option enables you to assign tags created in ePO - On-prem to managed endpoints.
Note
At least one of the above options has to be selected for ePO - On-prem integration.
Enable ePO Integration area.png "GUID-85BA8A29-913B-4647-A22A-BEE91525BC4A-low.png")
Click Next to view ePO Server Settings page.
ePO Server Settings.png "GUID-4F4D3385-1366-456C-B7F8-5D8576416CB6-low.png")
Specify the ePO server details as described in the following table.
Field
Description
Server Name or IP Address
Enter the name or the IP address (IPv4 or IPv6) of the ePO - On-prem server running the extension file. Note that this ePO - On-prem server should have the details of the hosts covered by the admin domain.
Contact your ePO administrator for the server name and IP address.
Server Port
Specify the HTTPS listening port on the ePO - On-prem server that will be used for the Manager-ePO communication. Contact your ePO administrator for the port number.
User Name
Enter the username to be used while connecting to the ePO - On-prem server.
Trellix recommends you create an ePO user account with View-only permissions required for integration.
Password
Enter the password for connecting to the ePO server.
Click Test Connection to ensure that the extension file is installed and started on the ePO - On-prem server.
If the connection is up, click Finish to save the configuration.
Configuring ePO - On-prem server for separate admin domains
You can enable or disable the Manager - ePO - On-prem integration for an admin domain. If you enable the Manager -ePO - On-prem integration for an admin domain, you can view the details for the hosts of that admin domain from the Attack Log.
If you have more than one instance of ePO - On-prem, the admin domains can be configured to different ePO - On-prem servers. However, you should plan your deployment in such a way that an admin domain is configured with the appropriate ePO - On-prem server. For example, if you have an exclusive ePO - On-prem server for your Branch Office, the Branch Office Admin Domain should be configured to the Branch Office ePO - On-prem server.
Note
For more information on ePO - On-prem, refer to ePO - On-prem documentation.