Verify that GTI File Reputation is working on Linux systems with Endpoint Security for Linux Threat Prevention installed

Technical Articles ID: KB93360
Last Modified: 10/27/2021

Environment

McAfee Endpoint Security for Linux Threat Prevention (ENSLTP) 10.x
All supported Linux operating systems

Summary

It’s important to make sure that your products remain up to date with the latest virus definitions. Also, make sure that the endpoints can communicate with the Global Threat Intelligence (GTI) server. For the DNS fully qualified domain names that ENSLTP uses for GTI communication, see: KB93324 - Endpoint Security off-box communication URLs. For the GTI server IP addresses and IP ranges, see: KB79640 - Connecting to Global Threat Intelligence.

To check whether GTI is working on Linux systems:

Copy the file Artemis-Test-File.zip from the Attachment section of this article to the Linux system.
Make sure that the location where you copied the file hasn’t been excluded from scanning.
Extract the file. The password to extract the file is clean.
Check the log and the ePolicy Orchestrator Threat Event. You should see the detection below:

Threat Name: RDN/ENSL GTI test file

Attachment

Artemis-Test-File.zip
2K • < 1 minute @ broadband

Affected Products

Endpoint Security for Linux Threat Prevention 10.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

Verify that GTI File Reputation is working on Linux systems with Endpoint Security for Linux Threat Prevention installed

Environment

Summary

Attachment

Affected Products

Languages:

Title

Title

Knowledge Center

Verify that GTI File Reputation is working on Linux systems with Endpoint Security for Linux Threat Prevention installed

Environment

Summary

Attachment

Affected Products

Languages:

Choose your region

Title

Title