When an appliance is under the management of the Central Management System appliance, appliance configuration tasks can be performed from either the Central Management System appliance or the managed appliances. However, Trellix recommends making configuration changes centrally from the Central Management System appliance instead of from the managed appliances for the following reasons:
It is more efficient because the tasks can be performed from a single interface—the Central Management System Web UI or CLI.
Changes you make on individual appliances could inadvertently override global settings for managed appliances. (By default, you cannot enter configuration mode in the CLI of a managed appliance until you confirm that you understand that this could happen.)
You can centrally configure settings for managed appliances using the Central Management System Web UI (primarily under the Appliance Settings tab) or by using the cmc execute commands in the Central Management System CLI.
Admin access to use the
cmc executecommandsAdmin access to most Appliance Settings pages, such as User Accounts and Appliance Licenses. Admin or Operator access to some Appliance Settings pages, such as Network, Login Banner, and YARA Rules.