Trellix Data Loss Prevention – SaaS 2410 Release Notes

Trellix DLP – SaaS 2410 is supported on a new platform and includes minor fixes, and resolved issues.

Trellix DLP – SaaS release information

Release Date - October 23, 2024

This release of Trellix DLP – SaaS is identified as version 2410, where the version identifier follows a YYMM convention. Trellix DLP – SaaS 2410 release, which includes minor enhancements and resolved issues.

Trellix DLP – SaaS is a unified solution that includes the following products:

Every update release is cumulative and includes all features and fixes from the previous release. For the previous release information, see here.

For more information about using Trellix DLP – SaaS, see the Trellix DLP – SaaS Product Guide.

Updated platform, environment, or operating system support

You can get the latest information about supported platforms, environments, and operating systems from these KB articles:

As part of our ongoing security enhancements, we have upgraded the following third-party libraries to address vulnerabilities. For detailed information on the previous versions and changes, please refer to the respective vendor Release Notes.

Minor update or fixes

This release improves existing features:

Enhanced S3 bucket registration - To secure the S3 bucket registration, you need to provide both the S3 Bucket Name and the Role ARN values. The Role ARN (Amazon Resource Name) is a unique identifier used to grant specific permissions for accessing AWS resources. For detailed instructions on how to obtain and download the Role ARN values, see KB: 000013848.

Note

The Role ARN value is optional. This approach is designed to maintain backward compatibility that allows you to continue using the current setup without requiring the Role ARN value. The requirement becomes mandatory in future releases.

Manually Resolve DFS - Using this option, you can manually resolve network share paths of all the child nodes of DFS shares and enter them individually in the network definitions. Alternatively, if you unchecked this option, Trellix DLP Endpoint for Windows - SaaS resolves all child nodes' share paths of the DFS share paths mentioned in the network definition. To enable Manual DFS Share navigate to Policy Catalog → Data Loss Prevention <version> → Windows → edit a policy → Settings → Advanced Configuration.

Support for the Turkish letter ‘İ’ - Trellix DLP Endpoint for Windows - SaaS now supports Turkish characters with case insensitivity for dictionary and keyword. For example, when a classification is created using a keyword containing the uppercase letter "İ", Trellix DLP converts it to the lowercase letter "i" allowing the rule to trigger.

Note

Trellix DLP Endpoint for Windows - SaaS can not convert to lowercase Turkish letter "ı" Ascii character code (305). However, you can create an entry in the Dictionary tab for both "ı" Ascii character code (305) and "i" Ascii character code (105) or you can create an advanced pattern to detect all "iıİ".

Application File Access Protection (AFAP) Rule enhancements - AFAP rule hooks are now injected only into processes configured for inspection in the AFAP rule, enhancing the overall performance of the product.

Advance parameter - The Advanced Parameters option in Windows client Configuration allow you to enable or disable experimental features and specify parameter values directly from the Trellix ePO console. This functionality eliminates the need to restart endpoint services when modifying or applying feature parameter values. For more information, see article 000013738

Addition to Ignored Processes - The list of ignored processes and file paths related to Trellix products is updated in Windows Client Configuration → Content Tracking → Ignored Processes. These changes are designed to prevent race conditions and enhance overall performance.

Note

Customized policies and rules do not update automatically. You must manually copy the new entries from the Trellix Default policy and incorporate them into your customized policies. For more information on the list of added processes, see article 000013942

Spreadsheet cell delimiter - The Respect Cell Boundaries in Spreadsheets checkbox in Content Tracking → Text Extractor prevents the incorrect identification of random 16-digit numbers. By default, this checkbox remains unchecked.

Resolved issues

This release resolves known issues and customer reported issues.

Known issues

For a list of current known issues, see: Trellix Data Loss Prevention - SaaS Known Issues.

Comparison of Trellix DLP – SaaS with Trellix DLP on-premises

Trellix is working toward feature parity with the on-premises Trellix DLP product. To know more about the options not available in this release, see article 000012803.