Trellix ePO
- Installation
- Data Model
- Types
- Release Notes
Installation
You will need your Trellix ePolicy Orchestrator (ePO) instance URL (hostname and port), username, and password to set up this integration. Ensure you have an account with appropriate permissions to access the Trellix ePolicy Orchestrator (ePO) API.
Configuration in Trellix ePolicy Orchestrator (ePO)
- Ensure you have access to your Trellix ePolicy Orchestrator (ePO) instance with administrative permissions.
- Note your Trellix ePolicy Orchestrator (ePO) instance URL including the hostname and port (e.g.,
https://hostname:8443). - Create or use an existing user account with API access permissions.
- Have your username and password ready for JupiterOne configuration.
Configuration in JupiterOne
To install the Trellix ePolicy Orchestrator (ePO) integration in JupiterOne, navigate to the Integrations tab in JupiterOne and select Trellix ePO. Click New Instance to begin configuring your integration.
Creating an instance requires the following:
-
The Account Name used to identify the Trellix ePolicy Orchestrator (ePO) account in JupiterOne. Ingested entities will have this value stored in
tag.AccountNamewhen theAccountNametoggle is enabled. -
Description to assist in identifying the integration instance, if desired.
-
Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as
DISABLEDand manually execute the integration. -
Your Trellix ePolicy Orchestrator (ePO) Base URL (hostname and port), for example
https://hostname:8443. -
Your Trellix ePolicy Orchestrator (ePO) Username for API access.
-
Your Trellix ePolicy Orchestrator (ePO) Password for API access.
Click Create once all values are provided to finalize the integration.
Next steps
Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.
Entities
The following entities are created:
| Resources | Entity _type | Entity _class |
|---|---|---|
| Account | trellix_epo_account | Account |
| User | trellix_epo_user | User |
Relationships
The following relationships are created:
Source Entity _type | Relationship _class | Target Entity _type |
|---|---|---|
trellix_epo_account | HAS | trellix_epo_user |
Trellix Epo Account
trellix_epo_account inherits from Account
Trellix Epo User
trellix_epo_user inherits from User
| Property | Type | Description | Specifications |
|---|---|---|---|
isAdmin | boolean |
Release Notes
- 2025-04-24 — Added Trellix ePO device user ingestion as new entities, relating device users to the hosts they use.