Upgrade and set up Trellix Data Loss Prevention Network Prevent for use with ePO

Use this workflow if you are currently managing your appliance from ePO - On-prem and intend to manage your appliance from ePO - SaaS.

Complete these tasks to upgrade and manage the appliance from ePO - SaaS.

Before the installation:
1. Obtain the Trellix DLP Network Prevent - SaaS subscription.
2. Set up an Trellix ePO - SaaS account.
3. Configure cloud storage for evidence and fingerprints.
4. Migrate the Trellix Data Loss Prevention Network Prevent policies and settings from Trellix ePO - On-prem to Trellix ePO - SaaS.
5. Migrate exact data match fingerprints CSV file.
  Note
  During migration, only the classifications and rules associated with EDM are migrated, but not the CSV packages. Re-create the CSV packages manually in ePO - SaaS for matching the exact data fingerprints.
6. Migrate manual registered documents.
  Note
  During migration, only the classifications and rules associated with manual registered documents are migrated, but not the packages. Upload the files and re-create the required packages manually in ePO - SaaS.
Manage users and accounts in Trellix ePO - SaaS.
Configure the network information in Trellix ePO - SaaS
Configure the DNS server and NTP server for your appliance from ePO - SaaS.
Note
The DNS server details must be configured in ePO - SaaS before provisioning the appliance with ePO - SaaS. The DNS information entered in Setup Wizard is overwritten by the DNS information entered in ePO - SaaS configuration upon connecting to ePO - SaaS.
Upgrade all Trellix DLP Network appliance extensions.
Upgrade your existing appliance software to version 11.11. You must upgrade from the existing appliance software to version 11.11 before provisioning the appliance with ePO - SaaS.
(Optional) Allow WebSocket for communication between the appliance and ePO - SaaS, if you are using a firewall in your network.
The appliance uses WebSocket protocol to communicate with some of the ePO - SaaS components. For successful provisioning and management of the appliance with ePO - SaaS, allow WebSocket communication between the appliance IP address and the Trellix Data Exchange Layer (DXL) URL in your firewall. For information about the DXL URL, see KB90878.
Provision the appliance with ePO - SaaS:
1. Generate the registration token in ePO - SaaS. The registration token generated in ePO - SaaS must be entered in the Setup Wizard while registering the appliance with ePO - SaaS. For generating the registration token, follow the instructions provided in Register appliances and servers.
2. Register the appliance with Trellix ePO - SaaS from the Setup Wizard. For AWS installation, you can configure the settings from the MASH menu
  Specify the registration token that you generated in ePO - SaaS, to register the appliance with ePO - SaaS. Optionally, you can specify the web proxy server settings and logon credentials for the appliance to connect to ePO - SaaS.
(Optional) Configure proxy server settings in ePO - SaaS.
If you haven't specified the proxy server settings in the Setup Wizard, enter the proxy server settings in this page. The settings in this page override the settings entered in the Setup Wizard. You can also use this task to update the proxy server settings in future, if required.
After the installation:
1. Verify policies
2. Verify incidents in Protection Workspace

Upgrade and set up Trellix Data Loss Prevention Network Prevent for use with ePO - SaaS