What information is sent to lc.trellix.com (the license server) from an ePO server?
The ePO server sends the following information to the license server:
- An inventory of what products are deployed and the number of endpoints
- The ePO License key (for example, AEMH9-U69K5-PKYRC-2SMPJ-5DWVJ)
- The installed ePO version (for example, 5.9.0, 5.10)
- The ePO Software Catalog Version (for example, 1.0, 2.0)
NOTES:
- The license server (lc.trellix.com) receives the license key from the ePO server.
- It's used to query your contract information, and verify that you're using a genuine product.
- Your personal information isn't sent during this process.
How do you guarantee that update.nai.com is only reached via port 80 TCP/HTTP?
We make sure that port 80 is available on the common updater service. But, a future decision to open other ports on that service is based on specific needs.
Common updater content is validated using a digital signature beneath the network protocol level. Even though this content appears to come from a single service, it's hosted via a Content Delivery Network (CDN). CDN uses multiple vendors that change periodically. Because of this design, we validate that the content is Trellix content, and not content that's hosted via a specific server operated from within our data center.
Is it possible to download from sites other than s-download.trellix.com and epo.trellix.com?
No.
Is it possible to download updates via port 443 HTTPS, and avoid using port 80 altogether?
No. The common updater service and related CDN repositories don't currently support downloads over TLS.
