Trellix XDR Platform (Formerly FireEye HX)

Connection Requirements

1

IP or Hostname

IP address or Hostname of the FireEye HX host.

2

Username

The username which is going to be used by OctoXLabs CSAM PLATFORM Asset to fetch data from FireEye HX.

"read-only" The user needs to have API admin rights on FireEye HX to read details. You need a valid user account on FireEye Endpoint Security associated with the "api_admin" or "api_analyst" role.

3

Password

Password of the provided username.

4

Port

Port number (optional, default: 3000).

5

Timeout

Time to return API call (default: 30 seconds).

6

SSL

Use SSL for connection (optional, default: Encrypted).

Please perform a connection test to ensure there is a valid connection to the host. When the discovery operation is finalized, you will be able to see the details on the Assets page.