The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Start ePO - On-prem from Trellix ESM

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

If you have a ePO - On-prem device or data source on Trellix ESM, and the ePO - On-prem IP address is on your Local Network, you can start ePO - On-prem from Trellix ESM.

Add a ePO - On-prem device or data source to Trellix ESM.

  1. From the dashboard, open a view.

  2. Select a result that returns source IP address or destination IP address.

  3. From the component menu GUID-90CC508D-C258-41AB-9D9C-4E1D7DE5FBCB-low.png, click Actions → Launch ePO.

    • If you only have one ePO - On-prem device or data source on the system and selected a source IP address or destination IP address, ePO - On-prem starts.

    • If you have multiple ePO - On-prem devices or data sources on the system, select the one you want to access and ePO - On-prem starts.

Related articles
  • Start ePO - On-prem from Trellix ESM
    Enterprise Security Manager > Enterprise Security Manager 11.7.x > ESM 11.7.x Product Guide > PG - ESM - Tuning McAfee ESM > Tuning your ESM configuration > ePO - On-prem as a device
  • Install Trellix EDR on ePO - On-prem
    Endpoint Detection and Response (EDR) > Endpoint Detection and Response Installation Guide > Install and upgrade Trellix EDR using ePO - On-prem
  • Configure Trellix EDR to SIEM connection on ePO - On-prem
    Endpoint Detection and Response (EDR) > Endpoint Detection and Response Installation Guide > Configure Trellix EDR > Configure Trellix EDR advanced features > Manage integrations > Integrate Trellix EDR with Trellix SIEM