The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Add a network address to the list

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

Add the trusted network addresses and subnets to the trusted list.

  1. Log on to the system as a user with administrator rights.

  2. Change the directory to the Firewall bin directory:

    /opt/McAfee/ens/fw/bin

  3. Run the command:

    ./mfefwcli --fw-trusted-add

    • --single — Specifies an IP address added to the list.

    • --range — Specifies the range of IP address added to the list. For example: 10.1.0.10-10.1.0.20.

    • --cidr — Specifies a network address that is added to the list. For example: 10.1.0.0/24

    • --include-local [on|off] — Adds the local subnets of the system to the list. This option is enabled by default.

    If you configure these options when your system is running in managed mode, the list is replaced by the ePO - On-prem policy after the policy enforcement.

Related articles