Trellix XDR Platform (formerly FireEye HX)

Connection Requirements

1 - IP or Hostname

IP address or Hostname of the FireEye HX host.

2 - Username

The username which is going to be used by OctoXLabs CSAM PLATFORM Asset to fetch data from FireEye HX.

The user needs to have "read-only" API admin rights on FireEye HX to read details.

You need a valid user account on FireEye Endpoint Security associated with the "api_admin" or "api_analyst" role.

3 - Password

Password of the provided username.

4 - Port

Port number (optional, default: 3000)

5 - SSL

Use SSL for connection (optional, default: Encrypted)

Attention

Please perform a connection test to ensure there is a valid connection to the FireEye Endpoint Security host. When the discovery operation finalized you will be able to see the details on Assets page.