Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

About CWPP and Trellix ePO

Skyhigh Security Cloud Workload Protection (CWP) works with Skyhigh CASB and Trellix ePO to provide endpoint security to protect against threats like malware, ransomware, and targeted attacks for Amazon Web Services (AWS) and Microsoft Azure.

Integrating Skyhigh CASB and CWP provides: 

  • The ability to configure and discover AWS and Azure integrations in one place via Skyhigh CASB.  
  • The ability to view all AWS and Azure Resources in Skyhigh CASB and see the Skyhigh Security Agent install status for compute instances. 
  • The option to install Skyhigh Security Agents on EC2s and VMs via Skyhigh CASB. 

To configure Skyhigh CASB to use CWP, first add a service instance for AWS or Azure, then import and activate a policy template. For instructions, see Configure Skyhigh CASB for CWP

Once configured, Skyhigh CASB displays the Skyhigh Security Agent install status information on the Resources page and allows you to filter managed vs unmanaged compute instances. The install status is refreshed periodically. You can select the unmanaged compute resources and install the Skyhigh Security Agent via: 

Once the Skyhigh Security Agent is installed, you can constantly view and monitor your compute instances in the Trellix ePO System Tree. 

Skyhigh Security CWP is available on a limited basis. For details on enabling CWS for your Skyhigh CASB tenant and Trellix ePO, contact Skyhigh Security Support.



  • Was this article helpful?