Trellix Agent communicates with the ePO - On-prem server periodically using agent-server communication to send events and ensure that all settings are up to date.
During each agent-server communication, the Trellix Agent collects its current system properties, and events that have not yet been sent, and sends them to the server. The server sends new or changed policies and tasks to the Trellix Agent, and the repository list if it has changed since the last agent-server communication.
See the Trellix Agent Product Guide for details about:
How agent-server communication works
How SuperAgents work to use bandwidth and ePO - On-prem performance
Collect Trellix Agent statistics
Queries provided by the Trellix Agent