Verification

Task	Information	Done
If Single Sign-On (SSO) is allowed, verify SSO using your Trellix Cloud Account credentials.	Log into the Trellix Helix Web UI using SSO. From the Configure menu, select Network to pivot to the Central Management System Web UI, or select Endpoint to pivot to the Endpoint Security (HX) Web UI. Verify that the CM Dashboard or Endpoint Security (HX) Dashboard opens instead of the Central Management System or Endpoint Security (HX) login page.
Test that Network Security and Email Security — Server alerts are being sent to Trellix Helix.	Do one of the following: Wait for new alerts to be generated. Log into the appliance CLI and push prior alerts by running one of these commands: `helix mode on-premises push-alerts-from <days>` `helix mode on-premises push-alerts-from <days> max-alerts <max number>` Log into the Trellix Helix Web UI. Select Investigate > Alerts and locate the new or pushed alerts. The alert name should begin with FIREEYE NX ALERT or FIREEYE EX ALERT.
Test that IOCs are being created.	Log into the Endpoint Security (HX) Web UI. Look for FireEye-CMS indicators.
Test that Endpoint Security (HX) alerts are being sent to Trellix Helix.	Wait for new alerts to be generated. Log into the Trellix Helix Web UI. Select Investigate > Alerts and locate the new alerts. The alert name should begin with FIREEYE HX.
Verify that each appliance can upload health status reports to Trellix Helix.	Run the `show helix health-stats status` command on the appliance, and verify that the `Enabled` field is `yes`. If the value is `no`, run the `helix health-stats enable` command.
Review the health status of each appliance.	Log into the Trellix Helix Web UI. Select Manage > Appliances. On the Appliances page, verify that each appliance is connected to Trellix Helix. Click the appliance hostname, and verify the health of services. For example, verify that the helixconnect status is healthy.