Solution
The following Trellix Intrusion Prevention System software is now available:
- Trellix IPS Manager / Central Manager – 11.1.7.84 [Windows, MLOS]
- VM-series Sensors/vIPS – 11.1.7.81 [VM5000, VM600]
- NS-Series Sensors – 11.1.5.84 [NS7600, NS3600, NS9500, NS9300, NS9200, NS9100, NS7500, NS7350, NS7300, NS7200, NS7250, NS7150, NS7100, NS5200, NS5100, NS3500, NS3200, NS3100]
- Trellix Virtual Controller/Probe - 2.6.2 (AWS, Azure).
The release offers new capabilities including:
- Next Generation Sensor Hardware NS 7600, addressing IPS performance band (5-10-15Gbps)
- Next Generation Sensor Hardware NS 3600, addressing IPS performance band (1-3-5Gbps)
- Supporting Incident Investigations and Advanced Detections in NDR for threats carried using HTTP/2 protocol
- ML behavioral analysis to detect obfuscation on PowerShell and General Threat Detection enhancements by use of GAM 2023
- Improved visibility into the phase of an adversary's attack by map alerts to more than 1 MITRE ATT&CK Tactic/Technique/Sub-Technique
- Improved manager handling of large number of signatures preventing SSID corruption and network disruption
- Configuring IPS Manager Appliance for IPv6
For more details and complete list of changes refer Release Notes: