Trellix DLP Endpoint for Mac 11.13.0 Release Notes

This release is applicable for on-premises installations. Trellix DLP Endpoint for Mac 11.13.0 release includes new features and resolved issues.

Supported upgrade path

Upgrade from...	To
11.10.100	11.13.0
11.10.200	11.13.0
11.10.300	11.13.0
11.11.0	11.13.0

Updated platform, environment, or operating system support

For information about supported platforms, environments, and operating systems, see KB96755.

New or changed features

This release introduces new features or improves existing features:

AI Data Risk Dashboard - This release introduces the Trellix AI Data Risk Dashboard to monitor, identify, and mitigate the risks associated with the unmanaged use of Generative AI platforms (Shadow AI) within your organization.

Leveraging your existing DLP Endpoint policies, this dashboard provides actionable, real-time insights into sensitive data being shared across key exfiltration vectors, including file uploads, copy/paste operations, and clipboard sharing with web-based AI prompts.

For more information on the key features and configuration, see Managing Incidents using AI Data Risk Dashboard in the Trellix DLP Product Guide.

Microsoft Entra ID Integration for DLP Policies - This release enhances our Data Loss Prevention capabilities by introducing native support for Microsoft Entra ID (formerly Azure AD). This integration allows IT administrators to configure DLP policies with user conditions and exceptions based on users and groups defined within Microsoft EntraID.

This feature provides a seamless and consistent policy enforcement experience. You can now extend your existing data protection, application control, and device control rules to all endpoints, whether they are synced to an on-premises Active Directory or directly to Microsoft Entra ID.

For more information on the configuration steps, see Set up Entra server and add Entra users in the Trellix DLP Product Guide.

IPv6 support - Trellix DLP Endpoint for Mac now supports IPv6, enhancing network address and communication capabilities. This feature ensures the product can seamlessly operate within modern network architectures.

Features supported:

Full IPv6 compatibility for all internal and external communications.
Compatibility for all current integrations with IPv6 networks.
Support for IPv6-only, IPv4-only, and dual-stack configurations.
Added crawling support for IPv6-based CSIF/SMB network paths.

Block Reaction for Network Share Protection Rules - This release introduces the ability to configure a Block reaction for Network Share Protection rules.

Resolved issues

This update resolves the following issues.

For the DLP Extension resolved issues, see Trellix Data Loss Prevention Extension Release Notes.

macOS resolved issues

Reference	Resolution
DLPX-4827	Fixed an issue where the DLP extension for Google Chrome, Microsoft Edge, and Safari browsers prevented WhatsApp Web, Instagram, and Facebook from loading.
DLPX-4954	Fixed an issue in the DLP client where the `datalossd` process consumed excessive CPU during Discovery scans.
DLPX-4962	Fixed an issue where enabling Safari web extension caused connection errors even if the application's URL was added to the URL Ignored List.
DLPX-5001	Fixed an issue where the Save As operation was not blocked when a user opened an empty file directly on a Network share or Removable Storage, added classified data, and attempted to save it under a new file name. For more information, see Operational Mode and Modules in the Trellix DLP Product Guide.
DLPX-5602	Fixed a compatibility issue where the DLP Mac browser extension prevented users from accessing and typing commands within the AWS CloudShell CLI section on Google Chrome and Safari browsers.
DLPX-5333	Fixed an issue where an error message: An internal error while trying to contact the server is displayed immediately after logging into the ePO - SaaS console using Safari or Google Chrome browsers.
DLPX-5338	Fixed an issue where the DLP browser extension caused significant slowdowns and timeouts, specifically when generating the Trellix Agent package.
DLPX-5536	Fixed an issue where an error message: An Error occurred while DLP scanning outbound traffic is displayed when accessing specific web applications.
DLPX-5636	Fixed an issue where websites added to the Web Protection URL Ignore list were not correctly bypassed by the DLP browser extension.

Known issues

For a list of current known issues, see: Trellix Data Loss Prevention 11.x.x Known Issues (KB89301).