Repositories are selected in a policy. products are updated from the repositories you specify in the Repository policies.
See ePO - On-prem product documentation for details about Repositories and different types of repositories.
Trellix Agent can update from any repository in its repository list based on the policy setting. These repository policies allow you to specify the most efficient means for designating a source repository for updates. You can select repositories based on ping time, subnet distance, or from a preset list.
Select → → .
From Products, select → . Click New Policy to create a policy or select → on the right pane for the My Default policy name to create a policy based on the default.
Note
For ePO - On-prem 5.9 or earlier, select Trellix Agent from the Product drop-down list, and Repository in the Category drop-down list. Click New Policy to create a policy, or select Duplicate in the Actions column for the My Default policy name to create a policy based on the default.
Type a name for the policy, then click OK.
Click a policy name to update it.
On the Repositories tab, select Use this repository list (the ePO - On-prem server-managed repository list), or Use other repository list (a locally controlled repository list that is not managed by the ePO - On-prem server).
Choose a basis for selecting a repository.
Selection method
Definition
Ping time
The shortest round-trip elapsed time between sending an echo request to a remote ICMP-enabled system and receiving a response from that system. Ping timeout can be configured to control the maximum time taken for a response from the remote ICMP-enabled system. The default is 30 seconds, minimum is 5, and maximum is 60.
Subnet distance
The fewest hops an ICMP packet makes while traversing the network from a local system to a remote system. The maximum number of hops can be used to control the packet traversal. The default is 15 hops, minimum is 1, and maximum is 30.
Use order in repository list
A user-defined list of repositories based on locally determined preferences. You can sequence and enable or disable specific distributed repositories on the Repositories tab of the Trellix Agent policy pages. Allowing Trellix Agent to update from any distributed repository ensures that they get the update in the sequence configured by the ePO - On-prem administrator.
Note
Trellix Agent selects a repository each time a change occurs in the repository list, IP address, or Repository policy option.