The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Test Firewall installation

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

Test Firewall installation to make sure Firewall is installed and working properly.

You must have enabled Firewall.

  1. Add a rule to block SSH to a particular system.

    /opt/McAfee/ens/fw/bin/mfefwcli --fw-rule-add --index 1 --name "BlockSSH" --action deny --direction out --proto tcp --log enable --remote-service 22 --remote-single x.x.x.x

  2. Violate the added rule by trying to SSH to that machine.

    ssh user name@machine IP

  3. Verify that SSH is getting blocked for that IP in:

    /var/log/messages

  4. Verify your Firewall installation using this log file:

    /tmp/enslfw-epo-setup.log

Related articles
  • Enable Firewall
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Firewall Product Guide - Linux > Configure Firewall on standalone systems
  • View the status of Firewall
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Firewall Product Guide - Linux > Configure Firewall on standalone systems
  • Test the Firewall feature
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Installation Guide - macOS > Install software on a standalone Mac > Test the installation