The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Test Access Protection installation

Prev Next

Test the software to make sure that Access Protection is enabled and can protect your system.

  1. Log on to the system as a user with administrator rights.

  2. Change the directory to the Threat Prevention bin directory.

    /opt/McAfee/ens/tp/bin

  3. Run the command:

    ./mfetpcli --getapstatus

    If Access Protection status is Enabled, verify whether Access Protection is working.

    To verify whether Access Protection is working, create a rule to block a file /tmp/testfile1.

    ./mfetpcli --createaprule --rulename test1 --block enable --report enable --subrulename stest1 --subruletype file --operation create --includetargetfile /tmp/testfile1

    When you run the command from the /opt/McAfee/ens/tp/bin directory, a rule test1 with a subrule stest1 is created that blocks the user from creating a file or directory with the name testfile1 in the /tmp directory.

  4. Run the command: touch /tmp/testfile1

    The following message is displayed: cannot touch '/tmp/testfile1': Permission denied

    For more information about Access Protection commands, see the Trellix Endpoint Security (ENS) for Linux product guide.