Recommended weekly tasks: best practice

Prev Next

Perform the Trellix suggested tasks at least once a week to ensure that your ePO - On-prem server-managed systems are safe from threats and your ePO - On-prem server is functioning normally.

Note

Where indicated, some of these tasks can be automated. Those instructions are included in this guide.

Recommended ePO - On-prem weekly tasks details

Task

Description

Weekly ePO - On-prem tasks

Check for Trellix product hotfixes, extensions, and updates on the Trellix website or from the Software Catalog.

Trellix periodically releases updates and hotfixes, as well as DATs and Engine updates. Check the Trellix website and ePO - On-prem Software Catalog frequently for new updates to check in to the ePO - On-prem console for local environment testing. You can also use the Software Catalog to download and check in these updates.

Note

DAT and Engine files are not updated with the Software Catalog.

Run a full replication to all distributed repositories.

Distributed repositories can become corrupt because of an incomplete replication task. Remove corrupt files in the repositories by running a full replication to all distributed repositories once a week. Full replication tasks delete the existing repository contents and replace them with new files.

Note

Incremental replication tasks only copy new or non-existent files and can't fix any corrupt files.

Run Distributed Repository Status.

Select MenuReportsQueries and Reports. Locate and run the Distributed Repository Status report to determine whether there have been any failures to update distributed repositories. If there are failures, run the replication again and ensure that it does not fail again.

Schedule an On-Demand Scan of all systems in your environment.

Schedule an on-demand scan of all systems in your environment that runs during off-hours.

See these documents for additional information:

  • Best practices for on-demand scans in Trellix Endpoint Security (ENS) and VirusScan Enterprise, See KB74059.

  • How to create a ePO - On-prem report for the event: 1203 (On-Demand Scan Completed), see KB69428.

  • For details about configuring on-demand scans, see the Trellix Endpoint Security (ENS) product documentation.

Weekly SQL database tasks

Back up the ePO - On-prem SQL database.

Use the Microsoft SQL Enterprise Manager to back up the ePO - On-prem database. Verify that the back-up was successful after it has completed.

Note

You can use the ePO - On-prem Disaster Recovery feature to create a snapshot of the records in the ePO - On-prem database to quickly recover, or reinstall your software, if needed.

See these documents for additional information:

  • How to back up and restore the ePO - On-prem database using SQL Server Management Studio, see KB52126

  • ePO - On-prem server backup and disaster recovery procedure, KB66616

Weekly Windows Server operating system tasks

Remove inactive systems from Active Directory.

Active Directory pulls in a list of new systems and containers that ePO - On-prem must manage. Confirm that the synchronization task is configured to run at least once a day and is working.

Caution

If the synchronization fails, systems are vulnerable on the network and pose a major risk for infection.