The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Configuring Live mode for malware analysis

Prev Next

You can configure live mode for malware analysis through CLI.

  1. Specify the network interface (Ethernet 1 or Ethernet 2) to be used for live analysis.

    analysis live live-interface
  2. Set the external IP address and subnet mask for the Ethernet 2 port.

    analysis live external ip
  3. Configure the default gateway IP address for the Ethernet 2 interface.

    analysis live default-gateway ip
  4. Set the name server IP used for MVX guest images.

    analysis live nameserver ip
  5. Configure the HTTP proxy IP address and port in the FDQN/IP and Port.

    analysis live http-proxy
  6. (Optional) If proxy authentication is required, configure the credentials.

    analysis live proxy-authentication
  7. Enable live URL dynamic analysis.

    analysis live url-dynamic-analysis enable
  8. Enable controlled Live mode.

    analysis live controlled-live-mode enable