License keys are required for system operation. The Endpoint Security (HX) appliance requires three license keys:
FIREEYE_APPLIANCE—Required to register your system and use the product features.
FIREEYE_SUPPORT—Allows your system to receive software image updates and the latest guest images.
CONTENT_UPDATES—Allows your system to access the Dynamic Threat Intelligence (DTI) network, which provides the latest intelligence on advanced cyber attacks and malware callback destinations. This enables Trellix products to proactively recognize new threats and block attacks. There are two versions of the content update license:
The two-way sharing license provides your appliance with malware intelligence from the DTI network and shares data about malware analyzed by your appliance.
The one-way sharing license provides your appliance with malware intelligence, but no information is submitted to the DTI cloud.
The following licenses are optional:
HX_ADVANCED —Allows access to Endpoint Security exhaustive Enterprise Search requests, data acquisition requests, and bulk acquisition endpoint requests via the API. This license is referred to as the Endpoint Security (HX) Power license. HXD (DMZ) appliances do not need an HX_ADVANCED license if the Endpoint Security (master) server associated with the DMZ server already has one.
MD_ACCESS—Allows Trellix products to connect to the Managed Defense VPN. Without this license, Managed Defense cannot manage the appliance.
Note
The functionality provided by optional licenses is disabled if the FIREEYE_APPLIANCE license is invalid.
If licenses have expired or will expire within 30 days, warnings are displayed on the Appliance License Settings page. For details, see Viewing License Notifications Using the Web UI.