Product Docs
Find answers to your technical questions and learn how to use our products.
Documentation
Products A-Z
Network Security
Active Fail Open
Ensures network traffic continues flowing during inline security appliance failures, maintaining business continuity.
Endpoint Security
Agent
The core management agent that enables communication between endpoints and ePolicy Orchestrator for policy enforcement.
Endpoint Security
Application Control and Change Control
Prevents unauthorized applications from running and tracks changes to critical system files across the enterprise.
Threat Intelligence
Attack Path Discovery
Identifies and visualizes attack paths across your environment to help prioritize remediation of critical exposures.
Network Security
Central Management System
Centralized management platform for Trellix network appliances providing unified policy configuration and monitoring.
Cloud Security
Cloud Bridge
Extends on-premises security policies to cloud environments, providing consistent protection across hybrid infrastructures.
Cloud Security
Cloud Multi-Vector Virtual Execution
Cloud-based sandboxing solution that executes suspicious objects across multiple environments to detect advanced threats.
Cloud Security
Cloud Workload Security
Provides threat detection and response for cloud workloads across AWS, Azure, and Google Cloud environments.
Cloud Security
Cloudvisory
Cloud security posture management providing visibility and compliance across multi-cloud environments.
Security Operations
Conduit Platform
Integration platform that connects disparate security tools, enabling automated workflows and unified data exchange.
Data Protection
Data Encryption
Encrypts sensitive data at rest and in transit to protect against unauthorized access and data breaches.
Security Operations
Data Exchange Layer
Real-time, bidirectional communication fabric enabling instant sharing of security intelligence across the Trellix ecosystem.
Data Protection
Data Loss Prevention
Monitors and controls sensitive data movement across endpoints, networks, and cloud applications to prevent data leakage.
Data Protection
Database Security
Monitors database activity and enforces security policies to protect against unauthorized access and data breaches.
Data Protection
Drive Encryption
Full-disk encryption solution that protects data on laptops and desktops against unauthorized access if devices are lost or stolen.
Endpoint Security
EDR with Forensics
Combines endpoint detection and response with deep forensic investigation capabilities for comprehensive threat analysis.
Email Security
Email Security - Cloud
Cloud-delivered email security protecting against phishing, malware, and business email compromise for Office 365 and Google Workspace.
Email Security
Email Security - Server
On-premises email security appliance offering multi-layered protection against advanced email threats and data loss.
Endpoint Security
Endpoint
Next-generation endpoint protection powered by machine learning and behavioral analysis to detect and prevent modern threats.
Endpoint Security
Endpoint Assistant
AI-powered assistant that guides security analysts through endpoint investigations and remediation workflows.
Endpoint Security
Endpoint Detection and Response
Continuously monitors endpoint activity to detect, investigate, and respond to advanced threats in real time.
Endpoint Security
Endpoint Forensics Bridge
Bridges endpoint forensic data from HX to the Trellix ecosystem for enriched investigation and automated response.
Endpoint Security
Endpoint Security (ENS)
Comprehensive endpoint security suite combining threat prevention, firewall, web control, and adaptive threat protection.
Endpoint Security
Endpoint Security (HX)
Advanced endpoint protection platform with detection and response capabilities for enterprise environments.
Endpoint Security
Endpoint Security Agent (HX)
Lightweight endpoint agent for the HX platform delivering real-time threat detection and containment on Windows, Mac, and Linux.
Endpoint Security
Endpoint Security for Servers
Specialized endpoint protection designed for server workloads, minimizing performance impact while blocking advanced threats.
Endpoint Security
Endpoint Security Modules (HX)
Modular add-ons for the HX platform extending detection, containment, and investigation capabilities.
Endpoint Security
Endpoint Security Storage Protection
Scans and protects network-attached storage systems and cloud storage buckets from malware in real time.
Endpoint Security
Endpoint Upgrade Assistant
Automates and simplifies the process of migrating endpoints to the latest Trellix security software versions.
Security Operations
Enterprise Security Manager
SIEM platform that collects and analyzes security event data from across the enterprise to detect and respond to threats.
Security Management
ePolicy Orchestrator (On-prem)
Central security management platform for deploying, enforcing, and reporting on security policies across the enterprise.
Security Management
ePolicy Orchestrator (SaaS)
Cloud-native security management platform delivering centralized visibility and control without on-premises infrastructure.
Data Protection
File and Removable Media Protection
Encrypts files on removable media and controls what data can be transferred to USB drives and other portable storage.
Data Protection
File Protect (FX)
Transparent file encryption solution protecting sensitive files wherever they are stored across the enterprise.
Security Operations
Helix
Cloud-native security operations platform integrating SIEM, SOAR, and threat intelligence for faster detection and response.
Security Operations
Helix Enterprise
Enterprise-grade security operations platform delivering advanced analytics, automation, and extended threat hunting capabilities.
Security Operations
Hyperautomation
Automates complex security workflows and integrations, reducing manual effort and accelerating incident response at scale.
Security Management
Identity Access Management
Controls user identities and access privileges across the enterprise, enforcing zero-trust principles and least-privilege policies.
Threat Intelligence
Insights
Delivers actionable threat intelligence and prioritized risk insights to help security teams focus on the most critical threats.
Threat Intelligence
Intelligent Sandbox
On-premises sandboxing appliance that detonates suspicious files and URLs to identify advanced malware before it reaches users.
Cloud Security
Intelligent Virtual Execution - Cloud
Cloud-based multi-vector sandbox that executes suspicious objects to expose advanced threats without on-premises hardware.
Network Security
Intelligent Virtual Execution - Server
On-premises virtual execution environment that detonates suspicious files across multiple OS platforms to detect zero-day threats.
Network Security
Intrusion Prevention System
High-performance network IPS that detects and blocks network-based attacks, exploits, and malware in real time.
Network Security
Logon Collector
Collects user logon information from Active Directory and shares it with network security solutions for identity-based policy enforcement.
Threat Intelligence
Malware Analysis
Advanced malware analysis appliance that executes and analyzes suspicious objects to expose the full attack lifecycle.
Endpoint Security
Mobile Security
Protects iOS and Android devices from mobile threats, enforces device compliance, and secures corporate data on personal devices.
Endpoint Security
MOVE AntiVirus
Offloads antivirus scanning from virtual machines to a dedicated security VM, minimizing AV storm impact in VMware environments.
Data Protection
Native Drive Encryption
Manages BitLocker and FileVault native OS encryption through ePolicy Orchestrator for centralized key management and reporting.
Network Security
Network Detection and Response
Monitors north-south and east-west network traffic to detect threats, exfiltration, and lateral movement across the enterprise.
Network Security
Network Security (NX)
Next-generation network security platform combining IPS, threat intelligence, and sandboxing for advanced threat detection.
Security Management
Offline Portal
Provides access to security management functions and documentation in air-gapped or disconnected network environments.
Network Security
Packet Capture (PX)
High-speed network packet capture and analysis appliance for forensic investigation and network traffic recording.
Security Management
Policy Auditor
Automates security configuration auditing and compliance assessments against industry benchmarks and regulatory frameworks.
Network Security
Rogue System Detection
Discovers and identifies unmanaged and unauthorized systems on the network to eliminate blind spots in security coverage.
Email Security
Security for Microsoft Exchange
Scans inbound and outbound email on Microsoft Exchange servers for malware, spam, and policy violations.
Email Security
Security for Microsoft SharePoint
Protects SharePoint document libraries from malware uploads and enforces data classification policies on stored content.
Security Operations
Security Orchestrator
Automates and orchestrates incident response workflows across the security stack to accelerate containment and remediation.
Security Management
System Information Reporter
Collects and reports hardware and software inventory data from managed endpoints for asset management and compliance reporting.
Threat Intelligence
Threat Intelligence Exchange
Instantly shares threat intelligence across the security ecosystem, enabling real-time adaptive threat detection and response.
Network Security
Virtual Intrusion Prevention System
Virtualized IPS protecting east-west traffic in VMware environments without requiring physical network taps or hardware appliances.
Endpoint Security
VirusScan Command Line Scanner
Lightweight command-line antivirus scanner for on-demand scanning of files and directories on Windows, Linux, and macOS.