This article describes how to manually check in an Extra.DAT update package to the Master Repository, and how to deploy it through ePO 5.x. For more information, see the "Download and deploy an Extra.DAT file to client systems from ePO" section of the Endpoint Security 10.7.x Product Guide.

An Extra.DAT is a temporary detection file that our Advanced Research Center creates. An Extra.DAT detects and removes threats that haven’t yet been added to the daily DAT files. Apply an Extra.DAT to the infected system and any systems that could potentially be compromised. An Extra.DAT automatically expires after 30 days.

IMPORTANT: An Extra.DAT is released with limited testing and is provided with the sole purpose of addressing a specific threat. We recommend that when you deploy an Extra.DAT to more than a few systems, you test deploying the Extra.DAT to a subset of these systems. After you’ve verified that there’s no problem with the Extra.DAT, then deploy it to all affected systems.

To check in the Extra.DAT, perform the steps below:

NOTES:

• We recommend that you back up the ePO server system, database, and policies. For details, see KB66616 - ePolicy Orchestrator server backup and disaster recovery procedure.
• You can't check in packages while any pull or replication tasks are running.
• If your environment requires testing new packages before deploying them, it's recommended to use the Evaluation branch. After you finish testing the packages, move them to the Current branch on the Software, Master Repository tab. 
   

1. Log on to the ePO console. To open a remote console, type one of the following URLs in your browser:
   
   https://<server_name>:8443
   https://<Server_IP_address>:8443
    
2. Click Menu, Software, Master Repository.
3. Click Actions and select Check In Package.
4. Select Extra.DAT.
5. Click Browse, locate the Extra.DAT, and then click Open.
6. Click Next. Information is displayed about the Extra.DAT that you're about to add to the repository.
7. Click Next.
8. Select the branch where you want to add the Extra.DAT. The default branch is Current.
9. Click Save. The Extra.DAT is now listed under Packages in the Master Repository list on the Master Repository page.
10. If you have distributed repositories, run a Repository Replication task to distribute the Extra.DAT to all Distributed or Remote repositories.

1. Create a Trellix Agent Product Update task to deploy the Extra.DAT, and schedule it to Run Immediately.
2. Perform an agent wake-up call to send the new Update task to your clients and apply the Extra.DAT.
   
   NOTE: If you prefer, you can reschedule an existing Update task to deploy the Extra.DAT.