Once installed, Trellix Endpoint Security (ENS) for Mac starts protecting the system immediately with default configurations. For standalone installations, Self Protection is enabled by default to secure the product's own files and processes.
For standalone installations, you can manually verify or enable protection through the local product interface.
Click the Trellix icon on the status bar and select Preferences.
Click the Common icon in the top navigation bar.
Click the Lock icon at the bottom and enter your administrator password to allow changes.
Select Enable Self Protection.
Select the resources to protect:
Files and folders: Prevents unauthorized modification or deletion of security files.
Processes: Prevents unauthorized stopping or killing of Trellix processes.
Specify the Action for each resource:
Block only: Prevent changes to protected software files without generating an event.
Report only: Allow changes to protected software files and generates an event in the Trellix ePO server.
Block and report: Prevent changes to protected software files and generates an event in the Trellix ePO server.
(Optional) Under Exclude these processes, click + to add trusted third-party process names that require access to Trellix files.
Click the Lock icon again to prevent further changes.
You can test the Self Protection feature to verify it is functionaing properly.