Endpoint Security - Installing Trellix HX on Linux

Instructions for RHEL/Ubuntu/Debian:

1. Obtain the FireEye HX archive. (If you are a new client, this will be provided by your Onboarding contact. If you are an existing client or MSP, please contact support@ostra.net.)

2. Unzip the archive.

tar -xvzf IMAGE_HX_AGENT_LINUX_35.31.22.tgz

3. Select the correct package for your Linux distribution and install it.

4. For CentOS, RHEL:

sudo yum -y install xagt-XX.XX.X-X.el7.x86_64.rpm && sudo cp agent_config.json /opt/fireeye/
For Ubuntu/Debian: sudo dpkg -i xagt-XX.XX.X-X.ubuntu16_amd64.deb && sudo cp agent_config.json /opt/fireeye/

5. Link the agent to the configuration file.

sudo /opt/fireeye/bin/xagt -i /opt/fireeye/agent_config.json

6. Start the service and set it to start at boot.

For CentOS 7, RHEL 7: sudo systemctl start xagt && sudo systemctl enable xagt
For Ubuntu/Debian: sudo systemctl start xagt && sudo systemctl enable xagt

***Important: Provide the device name to Onboarding or Support for validation. The device will only receive all security policies once it is placed in your client host set within the Ostra Trellix instance.

Please report any errors or omissions in these instructions to onboarding@ostra.net.