Configuring Trellix Agent wake-up port in SELinux confinement mode

Prev Next

You can configure the wake-up port below 1024 in SELinux confinement mode on Trellix Agent 5.7.7 and later.

  1. Install Trellix Agent using the install.sh -i -r command or upgrade Trellix Agent using the install.sh -u -r command to run the macmnsvc service as a root user.

  2. Upgrade to or install Trellix Agent SELinux 5.8.x RPM package.

  3. Add port to the http_port_t list by using the semanage port -a -t http_port_t -p tcp <port numbr>.

  4. Verify the port availability by using the semanage port -l | grep <port numbr> command. For example, semanage port -l | grep 100. The configured port should be added in the http_port_t list as,

    http_port_t tcp 100, 80, 81, 443, 488, 8008, 8009, 8443, 9000

    where 100 is the newly added port number.

  5. Restart the system.

  6. Login to the client system and run the cmdagent -e -p command.

  7. Send an Agent wake-up call from ePO - On-prem.

Agent wake-up call on ePO - On-prem using reserved ports is successful .