Verification

Task	Information	Done
If Single Sign-On (SSO) is allowed, verify SSO using your Trellix Cloud Account credentials.	Log into the Helix Enterprise Web UI using SSO. From the Configure menu, select Network to pivot to the Central Management System Web UI, or select Endpoint to pivot to the Endpoint Security (HX) Web UI. Verify that the CM Dashboard or Endpoint Security (HX) Dashboard opens instead of the Central Management System or Endpoint Security (HX) login page.
Test that Network Security and Email Security — Server alerts are being sent to Helix Enterprise.	Do one of the following: Wait for new alerts to be generated. Log into the appliance CLI and push prior alerts by running one of these commands: `helix mode on-premises push-alerts-from <days>` `helix mode on-premises push-alerts-from <days> max-alerts <max number>` Log into the Helix Enterprise Web UI. Select Investigate > Alerts and locate the new or pushed alerts. The alert name should begin with FIREEYE NX ALERT or FIREEYE EX ALERT.
Test that IOCs are being created.	Log into the Endpoint Security (HX) Web UI. Look for FireEye-CMS indicators.
Test that Endpoint Security (HX) alerts are being sent to Helix Enterprise.	Wait for new alerts to be generated. Log into the Helix Enterprise Web UI. Select Investigate > Alerts and locate the new alerts. The alert name should begin with FIREEYE HX.
Verify that each appliance can upload health status reports to Helix Enterprise.	Run the `show helix health-stats status` command on the appliance, and verify that the `Enabled` field is `yes`. If the value is `no`, run the `helix health-stats enable` command.
Review the health status of each appliance.	Log into the Helix Enterprise Web UI. Select Manage > Appliances. On the Appliances page, verify that each appliance is connected to Helix Enterprise. Click the appliance hostname, and verify the health of services. For example, verify that the helixconnect status is healthy.