This course provides an in-depth introduction to the tasks crucial to set up and administer Trellix Endpoint in an ePolicy Orchestrator – SaaS managed customer environment. Trellix Endpoint leverages and enhances built-in Microsoft Defender security with advanced protection for Windows 10, Windows Server 2016, and newer operating systems. Trellix ePolicy Orchestrator – SaaS is a Software as a Service based security management console for Trellix security products.

This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the Trellix Endpoint policies on the ePO – SaaS user interface, as well as detailed instructions for the integration of this solution.

• Access and use the ePolicy Orchestrator – SaaS management console
• Deploy Trellix Endpoint to endpoint systems including Windows 10 or newer workstations and Windows Server 2016 or newer servers
• Administer the Trellix Endpoint product to protect a customer’s network environment

Day 1

• Welcome
• ePO – SaaS: Product Introduction
• ePO – SaaS: Features and Architecture
• ePO – SaaS: Role of an Administrator
• ePO – SaaS: Planning and Populating the System Tree

Day 2

• ePO – SaaS: Using the Tag Catalog
• ePO – SaaS: Client Tasks
• ePO – SaaS: Managing Policies
• ePO – SaaS: Automatic Responses and Notifications
• Trellix Endpoint: Product Introduction
• Trellix Endpoint: Product Deployment

Day 3

• Trellix Endpoint: General Policy
• Trellix Endpoint: Firewall Policy
• Trellix Endpoint: Exclusions Policy, Evaluation Builds and Non-compliance Notifications
• Trellix Endpoint: Exploit Guard and the Trellix Endpoint Exploit Protection Program Settings Policy
• Trellix Endpoint: Protection Workspace Overview

Day 4

• Trellix Endpoint: Quarantine Management
• Trellix Endpoint: Log Files
• ePO – SaaS: Queries
• ePO – SaaS: Queries and Reports

This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security using Trellix Endpoint and ePolicy Orchestrator – SaaS.

Students taking this course should have a working knowledge of Windows operating systems, system administration, and network technologies. Basic understanding of computer security, command line syntax, malware/anti-malware, virus/ anti-virus, and web technologies is recommended.