How allow kernel updates (Linux) while keeping on-occess scan for /boot

[GJGVA]

Hello

Does any epo-admin with linux desktops has some knowledge/best practices to share in regards of the ENS / Trellix agent configuration to allow end-users to perform kernel updates while keeping on-access scan for /boot ?

Currently, we have to manually stop the agent, perform the updates, then re-activate it... 

kindly advise

thanks

D

[Pravas]

Hi @GJGVA ,

The following KB explains the steps to upgrade Kernel Modules with ENS.

https://kcm.trellix.com/corporate/index?page=content&id=KB94585

Thanks

[GJGVA]

Hi @Pravas 

thanks a lot for your reply. We have already used that document to manually perform the upgrade.

Actually, our main issue here is that Trellix doesn't allow end user to update the linux system to the latest release without deactivating Trellix.

Our users have Ubuntu LT 20.04. End users couldn't update to the latest Ubuntu release due to that Trellix on-access scan protection.

Any thoughts on how to allow end users to perform the Ubuntu updates without being blocked ?

Regards

D