11.5.x Release Notes

The Trellix SIEM Collector 11.5.x for Microsoft Windows release includes feature enhancements and addresses known issues.

This release is mandatory for all environments. We recommend that you always upgrade the Trellix SIEM Collector to the latest release as soon as possible.

Release details

Trellix SIEM Collector Windows Agent build version: 11.5.12943.41243

Product compatibility

This release supports:

Trellix Enterprise Security Manager 11.5 and above.
ePO - On-prem 5.10.0.4098.4.
Trellix Agent 5.8.1.256.1

For complete system requirements, see the SIEM Collector system requirements section in the Trellix SIEM Collector for Windows Installation Guide.

New features and changes

This section describes new features or enhancements in the Trellix SIEM Collector 11.5.x release.

Trellix SIEM Collector for Microsoft Windows has an updated toolchain, and now supports Windows Server 2022:

Trellix SIEM Collector for Microsoft Windows supports 64 bit. The new installation path is C:\Program Files\Trellix\Windows Event Collector.
You must download Oracle Instant Basic Client version 19.25 or above to your endpoint machine, and set the PATH environment variable to the Oracle Instant Basic Client folder where the dll libraries are located.

Resolved issues

The following issues were resolved in the Trellix SIEM Collector 11.5.x release.

Tracking number	Description
SIEM-37974	The Trellix SIEM Collector sometimes stopped sending logs to the receiver. This issue has been resolved.
SIEM-38426	The Trellix SIEM Collector service stopped working when Window EVT Files were created. This issue has been resolved.
SIEM-40043	The Trellix SIEM Collector service stopped working when a Window EVT Files client was added. This issue has been resolved.
SIEM-40427	When you added a custom SQL Client in Trellix SIEM Collector, an error was reported that drivers were missing. This issue has been resolved.
SIEM-40438	When you installed Trellix SIEM Collector through ePO - On-prem, the configuration information entered on the ePolicy catalog of ePO - On-prem was not enforced by Trellix SIEM Collector. This issue has been resolved.

Known issues

The following issues are known in the Trellix SIEM Collector 11.5.x release.

Tracking number	Description
SIEM-40453	When you create a product deployment task to uninstall the Trellix SIEM Collector through ePO - On-prem, the task fails.