Mobile Threat Defense 5.x iOS Application Release Notes

Prev Next

Last Updated: July 21, 2026


Trellix Mobile Threat Defense (formerly Trellix Mobile Security) 5.10.x iOS application Release Notes

Trellix® Mobile Threat Defense (MTD) 5.10.x iOS application release includes enhancements and resolved issues.

Every update release is cumulative and includes all features and fixes from the previous release. We recommend that you always upgrade to the most current update.

Rating

The rating defines the urgency for installing this update.

This release is recommended for all environments. Apply this update at the earliest convenience.

Release details

Release Date: July 2026

For additional information about documentation and release details, visit the Customer Support Portal (login required).

End-of-Life details:

For information about the End-of-Life (EOL) dates for Trellix MTD versions, see Trellix Product End-of-Life Information.

New dynamically added threats

Refer to the Trellix Threat Reference Guide for the details on new and updated threats.

System requirements

The following lists the system requirements for this release of Trellix MTD:

  • The minimum OS version is iOS version 15.

  • Trellix MTD requires a 64-bit device and does not support iOS 32-bit emulators.

New or changed

  • Optimize deep scan on iOS: This release enhances the deep scan analysis on iOS devices with clearer messaging and an optimized workflow, significantly reducing processing time.

  • Dashboard functionality optimizations: The Trellix MTD app dashboard features a dynamic, interactive interface. This update improves scroll performance for smoother navigation. A tile organization selector menu allows sorting by Default, Severity, or Recently Used. An adaptive layout dynamically adjusts tile placement based on device behavior.

  • Enable or disable MTD App Reset feature: This feature allows you to enable or disable the display of the Reset button within the Advanced Troubleshooting section.

To enable this option:

  • Navigate to Policies → App Settings in the Trellix MTD Console.

  • Select the Enable App Reset Feature checkbox under Advanced Troubleshooting.

Note

This feature requires Trellix MTD Console 5.37.5 or later.

  • Enhanced URL Threat Forensics: This release updates phishing and Web Content Filtering (WCF) threats generated by the Web scanning feature in the Trellix MTD app. The Source field in Threat Forensic in the Trellix MTD Console precisely identifies the method used to enter a malicious URL into the Web scanning feature.

The updated Threat Forensic → Source values are:

  • User Entry - URL: The user manually types or pastes the URL into the Web tile in the Trellix MTD app.

  • QR Code: The user scans a QR code containing a URL using the Web tile in the Trellix MTD app.

These updated values are displayed in both the Threat Details of the Trellix MTD app and the Threat Forensic in the Trellix MTD Console. This update improves threat forensics and reporting.

  • App tile display enhancement: The App tile in the Trellix MTD app displays based on the Trellix MTD Console configuration. The tile appears when either of the following conditions is met:

  • Select the Enable the App Risk Lookup feature in MTD checkbox in Policies → App Settings in the Trellix MTD Console.

  • Select the option to enable app threats in Policies → Threat in the Trellix MTD Console.

  • Enhanced SMS/MMS URL inspection (iOS): The Trellix MTD app enhances URL inspection for SMS or MMS messages from unknown senders through a secure remote server.

In addition to the existing on-device checks, when suspicious content is detected, the complete message is securely transmitted to the remote server to extract and evaluate URLs. If a message is identified as phishing, it is automatically marked as junk and moved to the Junk or Spam folder, depending on the iOS version.

To enable this feature:

  • Navigate to Policies → Phishing and Content Filtering in the Trellix MTD Console.

  • Select the Add SMS/MMS URL Inspection on Remote Server (iOS only) checkbox.

  • Select Save.

The feature is enabled in the Trellix MTD app.

Note

This feature requires Trellix MTD Console 5.37.x or later.

  • Go to Site button: The Go to Site button on the Web screen in the Trellix MTD app allows you to directly visit the safe websites.

  • AI-based phishing detections: This feature adds the Phishing Domains AI and Phishing Links AI subcategories to display AI-detected phishing domains and links and apply the appropriate phishing actions. These subcategories support machine learning-based phishing detection.

Enhanced Sideloaded iOS App detection: The Trellix MTD app includes enhanced detection for sideloaded iOS apps when EMM/MDM sync is enabled. When a sideloaded iOS app is detected, the Sideloaded iOS App threat is automatically generated with additional details.

When the system triggers both Suspected Sideloaded iOS App and Sideloaded iOS App threats, we recommend that you turn off the Suspected Sideloaded iOS App threat. Navigate to Policies → Threat in the Trellix MTD Console to manage these settings.

EMM/MDM sideloaded iOS app detection is currently supported by Ivanti, Intune, and VMware Workspace ONE.

Note

This feature requires Trellix MTD Console 5.37.x or later.

Manage location permissions for Threat Zones tile: The Threat Zones tile features a location permission prompt to improve privacy. When you log on to the Trellix MTD enabled device, the Trellix MTD app requests a location permission only when you use the Threat Zones feature, and when the following conditions are met:

  • The admin console does not require location permissions.

  • Select the Danger Zone checkbox in Policies → App Settings in the Trellix MTD console.

You can manage location access from the iOS system settings. If you deny location permission, a default location displays. This configuration ensures that the system accesses location data only when needed, which reduces unnecessary data collection.

  • UI support for Right-to-Left (RTL) languages: The Trellix MTD app includes an enhanced user interface for RTL languages, including Arabic and Hebrew. The alignment optimizations improve arrows, buttons, icons, and text to support the RTL layout. These improvements streamline navigation and enhance the user experience when the application uses RTL languages.

  • Manage event log settings: The Trellix MTD app updates the Full Event Log and the Activity Report. These features display tracking data across separate monitoring tabs. By default, All is selected in the Apps, Web, Device, Network, and Shortcuts tabs.

The system categorizes events into Active Issues and Resolved Issues to provide a clear view of security incidents. The system structures severity levels for these issues into Updates, Risks, and Threats with All selected by default in the tabs. Turn on notifications in the Settings to receive a summary of device protection activity.

You can also perform the below actions as required:

  • Sort threats by severity level: Use the sorting menu to organize threats by their severity levels, including Critical, Elevated, Low, or Normal. This option expands the existing capability to sort by Date and Time.

  • Select custom date range: Select a preferred date range, including 1 day, 1 week, 1 month, or 3 months, to view statistics. The report displays the selected date range and the number of scans completed.

Resolved issues

This release resolves the general stability issues.