Trellix Data Loss Prevention – SaaS 2408 Release Notes

• Trellix Data Loss Prevention Endpoint - SaaS is renamed as Trellix Data Loss Prevention Endpoint Complete - SaaS.

• Trellix DLP Prevent - SaaS Software is renamed as Trellix Data Loss Prevention Network Prevent - SaaS.

• Trellix DLP Monitor - SaaS Software is renamed as Trellix Data Loss Prevention Network Monitor - SaaS.

• Trellix DLP Discover - SaaS is renamed as Trellix Data Loss Prevention Discover - SaaS.

• Trellix Device Control – SaaS

• Trellix DLP Discover – SaaS

• Trellix DLP Endpoint for Windows - SaaS

• Trellix DLP Endpoint for macOS - SaaS

• Trellix DLP Network Monitor – SaaS

• Trellix DLP Network Prevent – SaaS

• McAfee DLP – SaaS Release Notes

• McAfee DLP Discover – SaaS Release Notes

• McAfee DLP Endpoint for macOS - SaaS Release Notes

• McAfee Endpoint for Windows - SaaS Release Notes

• McAfee DLP Monitor – SaaS Release Notes

• McAfee DLP Prevent – SaaS Release Notes

• For Trellix DLP Discover – SaaS: 000010983

• For Trellix DLP Endpoint - SaaS: 000006700

• For Trellix DLP Network Monitor – SaaS: 000010052

• For Trellix DLP Network Prevent – SaaS: 000010052

• Trellix IAM changes — Trellix DLP Network appliance software points to the new Trellix Fully Qualified Domain Name (FQDN) and Trellix Identity and Access Management (IAM) URLs from the existing McAfee FQDN. To ensure uninterrupted service to IAM, update your firewall settings to allow the https://iam.cloud.trellix.com URL. The https://iam.mcafee-cloud.com is now changed to https://iam.cloud.trellix.com. To migrate to new Trellix IAM domains, upgrade to Trellix DLP Network Appliances version 11.10.700.

  If you do not intend to upgrade to 11.10.700, see article 000013552 to migrate to the Trellix domain.

• Support for Trellix DLP Network Prevent in AWS — Starting with this release, Trellix DLP Network Prevent appliance is offered as an Amazon Machine Image (AMI). This helps you deploy the appliance seamlessly on AWS EC2 instance, which can be integrated with cloud web or email gateways.

  For information about deploying and installing the Trellix DLP Network Prevent - SaaS appliance in the AWS environment, see Deploy and install the Trellix DLP Network Prevent appliance in AWS using the .iso file and Deploy and install the Trellix DLP Network Prevent appliance using the Amazon Machine Image (AMI).

• REST API integration support with cloud gateways — Trellix DLP Network Prevent now offers REST API based integration with Trellix Email Security - Cloud to scan outbound emails and enable Trellix Email Security - Cloud to take action based on the defined Trellix DLP policies. This API integration is also supported with other third party cloud gateways integration.

  This provides seamless native integration with Trellix Email Security - Cloud and other cloud gateways without requiring to backhaul the traffic to on-prem appliances for inspection.

  For more information, see Trellix DLP REST API integration with cloud gateways.

• Setting the confidence threshold in manually registered documents — Trellix Data Loss Prevention Discover and Trellix DLP – SaaS Network Appliances allow you to configure the number of fingerprints that must be matched in a manually fingerprinted document to trigger a violation. This helps in increasing the detection confidence as it minimizes false positives by triggering more accurate detections and reduces the analysis time.

  An incident is triggered when the number of matches is equal to or higher than the set confidence threshold. You can set the Confidence Threshold percentage between 10 to 100 percent. For example, if a fingerprinted document generates 100 signatures, and if you select 10%, then 10 signatures are matched at random in the scanned document.

  To set the threshold percentage go to, Classification → Registered Documents → Manual Registration → Confidence Threshold.

• Enhanced screen capture protection — Screen capture actions performed using Universal Windows Platform apps, such as Snip & Sketch are now protected by Trellix DLP Endpoint for Windows - SaaS.

  Note

  In Microsoft Windows 11, Trellix DLP Endpoint for Windows - SaaS only supports data protection with the snip option. However, it does not provide data protection if the screen is recorded.

• Block Gen AI URLs — Web Application Control feature in Trellix DLP Endpoint for Windows - SaaS now allows you to block access to generative AI websites.

  To block a new generative AI website go to DLP Policy Manager → Definitions → URL List → Action → New.

• Monitor text upload to Gen AI prompts — In the Web Protection page, you can now add web URL tags in order to monitor text uploads to the generative AI website. As a result, corporate devices can be monitored in order to avoid sensitive data leaks. For additional information on finding tags for other websites, see article 000012846.

• Drag and drop — This release provides an option in the Web Protection page to optionally disable drag and drop of attachments from Microsoft Outlook into supported Chromium browsers.

• Disabling file deletion on quarantine folders — Trellix DLP – SaaS extension is now enhanced with new functionality to prevent the automatic deletion of quarantine files based on time limits. This feature allows you to avoid the deletion of quarantine files in quarantine folders and achieve the goal of "never deleting the quarantine files".

  To prevent deletion of quarantine files go to Policy Catalog → Data Loss Prevention → Windows Client Configuration → Quarantine and set the value of Quarantine duration (Days) to "0".

The user interface in Trellix DLP – SaaS 2408 version shows the following features that will be available for use in the next release of Trellix DLP Endpoint for Windows - SaaS:

• Support for Safari browser — Using web protection rules in ,Trellix DLP Endpoint for macOS - SaaS, you can now monitor and block data uploads to Safari browser.

• Block sensitive data uploads via Chromium browsers — Using web protection rules in Trellix DLP Endpoint for macOS - SaaS, you can now block data uploads to Google Chrome and Microsoft Edge browsers.

  For more information about how to deploy Trellix DLP web protection extension on browsers using mobileconfig, see article 000013383.

• Block sensitive emails and attachments — With Trellix DLP Endpoint for macOS - SaaS, you can now block sensitive emails and attachments sent from Microsoft Outlook.

• Protect sensitive data from printing - By using printer protection rules, you can now monitor and block confidential documents from being printed on both local and network printers. For more information on Privacy Preferences Policy Control for printer protection, see KB91109.

• Apply DLP rules to custom users - You can now create a Custom User List in DLP Policy Manager → Definitions page. Using the Policy Catalog → DLP Rule Set, you can now apply Data Protection and Device Control rules to local users by selecting belongs to one of the Custom User List in the Conditions → and End-User field.

  Note

  belongs to one of the Custom User List option is not available for email protection rules.

• Support for custom Queries & Reports — Create custom queries and generate reports for the following types of events:

  • DLP Computer Policies

  • DLP Computer Properties

  • DLP Discover Scans

  • DLP Endpoint Installed version summary

  • DLP Operational Events