Network requirements

Standalone devices are prevented from automatically connecting to a cloud Trellix Helix Central Management System appliance in the network (if any). See Preventing connections to a cloud Central Management appliance.

Devices connected to a Trellix Helix-enabled Central Management System appliance are configured to stream alerts and health statistics directly to Trellix Helix, and the Central Management System appliance is prevented from streaming this data to Trellix Helix on behalf of the connected devices. See Sending alerts and health stats directly from appliances.

Connectivity with the DTI network.

Connectivity with the alert ingestion URI.

Add the fully qualified domain name (FQDN) or Helix full URL to your Web proxy server and firewall. Your FQDN is in the FQDN field of the show helix command and the URL is in the Helix Full URL field of the show datastreaming helix command. The traffic uses HTTPS (port 443).

Connectivity with the Trellix Helix Web UI URL.

Add https://apps.fireeye.com/helix/id/<helixID> to your Web proxy server and firewall. Your <helixID> is displayed in the Console URL field in the show helix CLI command output. The traffic uses HTTPS (port 443).