The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in mid-October 2026. We hope you enjoy the updated experience.

How Firewall works

Prev Next

Firewall scans all incoming and outgoing traffic at the packet level and compares packets to the configured firewall rules to determine whether to allow or block the traffic.

  1. The administrator configures firewall rules in Trellix ePO - On-prem and enforces the policy to the client system.

  2. If managed, the administrator configures firewall rules in Trellix ePO - On-prem and enforces the policy to the client system.

  3. The user performs a task that initiates network activity and generates traffic.

  4. Firewall scans all incoming and outgoing traffic and compares packets to configured rules. If the traffic matches a rule, Firewall blocks or allows it, based on the rule criteria.

  5. Firewall logs the details. Firewall logs the details, then generates and sends an event to Trellix ePO - On-prem.

How it works
How it works