Use Trellix ePO - On-prem to deploy the client software to systems in your network that are managed.
To make sure that On-Access Scan is disabled, configure the Trellix Endpoint Security (ENS) Threat Prevention On-Access Scan policy with the Enable On-Access Scan option is unselected.
Task
Log on to the Trellix ePO - On-prem server as an administrator.
Select Menu | Systems | System Tree, then select a group or systems.
On the Assigned Client Tasks tab, click Actions, then click New Client Task Assignment.
Complete these options, then click Create New Task:
For product, select Trellix Agent.
For task type, select Product Deployment.
On the Client Task Catalog page:
Type a name for the task.
Select Mac as the target platform.
In Products and components, select the product, select Install as the action, then click Save.
Tip
You can add more products by using
.png)
.To deploy the software from Trellix ePO - On-prem with the On-Access Scan option disabled, you can use the Trellix Agent command-line option to pass the
OAS-offparameter in the deployment task. The command-line option is available in the Client Task Catalog page under the Products and Components section. By default, the software is installed with the On-Access Scan option enabled.To deploy the software from Trellix ePO - On-prem with Firewall disabled, you can use the Trellix Agent product deployment command line option to pass the
FW-offparameter in the deployment task.To deploy Threat Prevention or Adaptive Threat Protection in
asyncmode, pass the command line argument as async in the product deployment task.To deploy Threat Prevention or Adaptive Threat Protection in sync mode, pass the command line argument as
syncin the product deployment task.To move Threat Prevention or Adaptive Threat Protection from sync to async mode or vice versa, you can also run the Trellix ePO - On-prem Deployment Kit (EEDK) package. For more information see Trellix Knowledge Base article KB91337.
During upgrade if you don't include the argument, Threat Prevention and Adaptive Threat Protection is upgraded from Kext to sync mode and Kextless to async mode.
On the Client Task Assignment Builder page:
Select the task, then click Next.
Schedule the task to run immediately, click Next to view a summary of the task, then click Save.
In the System Tree, select the systems or groups where you assigned the task, then click Wake Up Agents.
Select Force complete policy and task update, then click OK.