You can configure the wake-up port below 1024 in SELinux confinement mode on Trellix Agent 5.7.7 and later.
Install Trellix Agent using the
install.sh -i -rcommand or upgrade Trellix Agent using theinstall.sh -u -rcommand to run the macmnsvc service as a root user.Upgrade to or install Trellix Agent SELinux 5.8.x RPM package.
Add port to the
http_port_tlist by using thesemanage port -a -t http_port_t -p tcp <port numbr>.Verify the port availability by using the
semanage port -l | grep <port numbr>command. For example,semanage port -l | grep 100. The configured port should be added in thehttp_port_tlist as,http_port_t tcp 100, 80, 81, 443, 488, 8008, 8009, 8443, 9000
where 100 is the newly added port number.
Restart the system.
Login to the client system and run the
cmdagent -e -pcommand.Send an Agent wake-up call from ePO - On-prem.
Agent wake-up call on ePO - On-prem using reserved ports is successful .