The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Save Trellix Endpoint Security (ENS) 26.x custom settings to a file by exporting them

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

To install Trellix Endpoint Security (ENS) 26.x locally on an endpoint with preconfigured settings, save the settings to a file that the installer can import. Use the ESConfigTool utility to save the custom settings, then use a SetupEP command-line installation to import them.

This tool exports all settings for the selected product modules to a location that you specify.

Best practice: To create custom packages that include custom policies and client software for deployment with ePO - On-prem, use the Package Designer.

For option definitions, run : ESConfigTool.exe.

  1. In ellix ENSTrellix ENS, configure your settings.

  2. Open a command prompt window in Windows.

  3. Run ESConfigTool to export your settings to <file_name> and save this file to a folder that is not protected by Trellix.

    ESConfigTool.exe /export <file_name> [/module <TP|FW|WC|ATP|ESP> ]

    The folder containing ESConfigTool is protected, so use a different, writable location for the export location.

    ESConfigTool.exe /export C:\ENS\firewall.policy /module FW

    This example exports the Host Intrusion Prevention settings to C:\ENS\firewall.policy.

When you're ready to install Trellix ENS with the saved settings, use the SetupEP utility with the /import command-line option.

Related articles