Getting Started with XDR for Endpoints

Install the Agent on all your endpoints and allow Trend Micro to provide you visibility into your most at risk endpoints.

The Agent installer uses advanced threat assessment technology to determine which of your endpoints are most at risk. After the endpoints start reporting back, a list of recommended endpoints on which you should enable XDR displays.

  1. Go to Inventory Management > Endpoint Inventory.
    Note:

    After you have enabled XDR on your endpoints, the introductory screen no longer appears and you can access the main Endpoint Inventory screen directly.

  2. Install the Agent on all your endpoints.
    1. Under Step 1. Locate your most at risk endpoints, select the operating system you want to install the Agent on.
    2. Download the Agent installer locally and distribute the package to endpoints or copy the URL link to install the package using a web browser.
      • For Windows endpoints that require a proxy server to connect to external networks, open a command line editor as an administrator and execute the following command:

        EndpointBasecamp.exe /proxy_server_port <proxy_server_ip_or_fqdn:port>

        For example:

        EndpointBasecamp.exe /proxy_server_port 10.1.1.1:80

      • For more information on installing to Linux endpoints, see Deploying the Agent Installer to Linux Endpoints.

      • For more information on installing to macOS endpoints, see Deploying the Agent Installer to Mac Endpoints.

      Important:

      Endpoint Basecamp only supports HTTP proxies and does not support the use of proxy credentials.

    Important:

    The Agent installer is specifically configured to report to your Trend Micro Vision One console.

  3. After installing the Agent, allow some time for your endpoints to run the assessment and report back to Trend Micro Vision One.
    Note:

    The recommended list normally takes about 10 minutes to generate after endpoints start reporting to Trend Micro Vision One. Trend Micro Vision One sends you a notification email and generates a notification alert when the list is ready.

  4. Go to Inventory Management > Endpoint Inventory.

    The Enable XDR on Recommended Endpoints screen appears.

  5. If you want to enable XDR on the recommended endpoints, click Enable XDR Now, otherwise, click Not Now to select from all endpoints that reported to Trend Micro Vision One.

    The Endpoint Inventory screen appears.

    For more information on managing endpoints after on-boarding, see Endpoint Inventory.