Trellix NDR is available in three software licenses: Essentials, Core, and Enterprise. Each license includes a defined set of capabilities.
Software license comparison
License | Includes | Capabilities |
|---|
Essentials | NX and PX license (carryover) NDR Feature license for NX NDR Sensor license (5 virtual) NDR Console license (1 virtual) Central Manager (2 virtual CMS)
| |
Core | NX and PX license (carryover) NDR Feature license for NX NDR Sensor license (5 virtual) NDR Console license (1 virtual) Central Manager (2 virtual CMS)
| All Essentials capabilities, plus: Machine learning and AI anomaly detections and correlations Asset discovery and integrations Hyperautomation for NDR (For Trellix products Response Actions) Forensics — Packet capture (Event-based and selective)
|
Enterprise | NX and PX license (carryover) NDR Feature license for NX NDR Sensor license (10 virtual) NDR Console license (1 virtual) Central Manager (2 virtual CMS)
| All Essentials and Core capabilities, plus: Attack Path Discovery (APD) Hyperautomation for NDR (Full SOAR) Retroactive analysis using Deep Packet Inspection (DPI) IVX (API submission) Full Forensics
|
For more details, see Overview of license types and features in Trellix Network Detection and Response console (0000015667).