The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Dependencies, Limitations and Known Issues‌

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

  • It is not possible to mark an alert as false positive. However, the process can be added to Process Guard exclusion if deemed necessary to avoid receiving alerts.

  • Process Guard cannot detect or block processes from accessing LSASS if they run before the Process Guard module is initialized and running.

  • In some rare scenarios Process Guard can detect Endpoint Agent process xagt.exe and generate an event.

  • For a list of known issues in the current release, refer to the release notes.

Related articles
  • Alert Settings
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Configuring the Process Guard Module‌ > Configuring the Process Guard Server Settings‌
  • Detecting Processes Accessing LSASS
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Installing the Process Guard Module‌
  • Are there any compatibility issues with other security solution?
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Frequently Asked Questions‌