Manage Trellix ESM

Configuration

Manage Logs

Configure the types of events that are logged on the event log.

Obfuscation

Define global settings to mask selected data on any alert record that is sent out in event forwarding.

Logging

Send internal events to the Trellix Enterprise Security Manager - Enterprise Log Manager for storage. This data can be used for auditing.

System Locale

Select the system language to use for logging events such as health monitor and device log.

Name Map

Deselect the ports and protocols to have them display raw numbers instead of names. For example, if you deselect Source Port or Destination port,

http:80

is displayed as

80

. If you select

Protocols

, raw number

17

is displayed as

udp

.

Local Network

Add a list of the IP addresses or subnets included in your Local Network.

Key Management

Certificate

Install a new Secure Socket Layer (SSL) certificate.

Regenerate SSH

Regenerate the private or public SSH key pair to communicate with all devices.

Maintenance

Update ESM

Update Trellix ESM from the Trellix rules and updates server or a Trellix security engineer.

ESM Data

Download a .tgz file that contains information regarding the status of your Trellix ESM. This status can help Support troubleshoot and resolve issues.

Task manager

View the queries running on the Trellix ESM and stop them, if needed.

Shutdown

Shut down Trellix ESM. You are warned that this action causes all users to lose communication with the system.

Reboot

Stop and restart Trellix ESM.

Connect

Give Support access to your system when you call for support.

View Statistics

Access the following information for a Trellix ESM device:

Settings Backup

Back up your Trellix ESM settings and schedule automatic backups.

Restore Backup

Restore a Trellix ESM settings backup.