If your Trellix DLP Network appliance is in a demilitarized zone (DMZ), you can securely copy the evidence files, despite no network access to the evidence file share. Trellix DLP allows you to copy the evidence files to the evidence file share via the Trellix DLP server.
In ePO - On-prem, open the Policy Catalog.
Select the DLP Appliance Management product, choose the General category, and open the policy that you want to edit.
In Trellix DLP Server for Evidence Copy, click + to add the host name or IP address of the Trellix DLP servers you want the Trellix DLP Network appliance to connect to.
Click Update, then save the changes.
After you add the DLP Server for evidence copy, edit the Policy Catalog → Data Loss Prevention <version> → Server Configuration policy applied to the DLP Server and enable evidence storage HTTP service.