The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Replace a Trellix SIEM appliance

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

Remove a Trellix SIEM appliance and install a new one.

  1. Back up the appliance.

  2. Remove the old appliance.

    1. Turn off the power.

    2. Note where the cables are connected so you can connect them to the new appliance.

    3. Disconnect the cables and the power cord.

    4. Remove the chassis from the rack.

  3. Install the new appliance.

    1. Place the chassis in the rack.

      Note

      For some types of rails, you might need to remove a stud from the side of the chassis.

    2. Connect the cables and power cord in the same configuration as the old appliance.

    3. Turn on the power.

  4. Restore the backup.

  5. Roll out policy (Policy Editor →

    GUID-A5690870-A648-4CC7-B1B1-F092A03B5C3B-low.png
    ).

  6. Sync alarms (System Properties → Alarms → Settings tab → Sync).

:
Related articles
  • Reset a Trellix SIEM appliance
    Enterprise Security Manager > Enterprise Security Manager 11.7.x > ESM 11.7.x Hardware Guide > Appliance setup
  • Move a Trellix SIEM VM to another host
    Enterprise Security Manager > Enterprise Security Manager 11.7.x > ESM 11.7.x Installation Guide > Deploy a Trellix ESM solution on a VM > Post-deployment tasks
  • Move a Trellix SIEM VM to another host
    Enterprise Security Manager > Enterprise Security Manager 11.6.x > ESM 11.6.x Installation Guide > Deploy a Trellix ESM solution on a VM > Post-deployment tasks