Skip to main content

Trellix: DLP Endpoint for Mac 11.11.0, DLP Endpoint for Windows 11.12.0, and DLP Extension 11.12.0 Now Available

Updated

The latest versions of Trellix Data Loss Prevention (DLP) Endpoint for Windows and macOS, and DLP Extension are now available for download. The new and enhanced features in these releases represent a significant improvement in capability, extending visibility, and control over sensitive data.

Trellix DLP Endpoint for Mac 11.11.0

This release introduces feature enhancements and critical issue resolutions aimed at expanding platform capabilities and strengthening endpoint control:

  • Clipboard protection on macOS
    New policy enforcement allows control over copy operations involving sensitive content between apps, including browsers. Admins can target specific applications or user groups, with support for exceptions to maintain usability. 
  • AirDrop control
    DLP policies can now monitor, block, or allow file transfers via AirDrop using Device Control and Data Protection rules—extending coverage to local wireless file-sharing scenarios. 
  • WebDAV support
    Evidence files can now be uploaded over HTTPS using the WebDAV protocol, supporting secure and remote storage scenarios—particularly beneficial for distributed environments lacking SMB/local share access. 
  • Resolved issues highlights
    • Fixed high CPU usage issues after upgrades (DLPX-4184)
    • Addressed memory overruns during Discovery scans on macOS Sequoia (DLPX-4721)
    • Resolved issues with Web Extension interfering in Chrome/Safari (e.g., system tree loading and file upload blocking)
    • Corrected failures in triggering incidents when files were moved to Google Drive despite classification rules

Note: See the Knowledge Base article Supported platforms for Trellix Data Loss Prevention Endpoint Complete - macOS for information about supported platforms and ensure that any custom policies align with the new features or changes.

Trellix DLP Endpoint for Windows 11.12.0

This release delivers critical enhancements and fixes aimed at improving functionality, detection accuracy, and user experience.

Key enhancements include:

  • Optical Character Recognition (OCR)
    OCR is now supported across DLP channels (file transfers, emails, web uploads, and image printing), enabling detection of sensitive content embedded in images.

    Note: A separate installer and an add-on license are needed to implement OCR for DLP Endpoint for Windows. Contact your Account Management team (Sales, Customer Service) to learn more or purchase a license.
  • Manual classification and visual labeling enhancements
    You can now choose to enforce manual classification meta-data and visual labels with a single click option. Visual labeling can be color-coded and classification prefix text in Microsoft Outlook is now optional, with the ability to customize the prefix text. 
  • Plug-and-play rules support for USB-attached SCSI (UAS) devices
    UAS is now recognized as a new Removable Device/Removable Storage Device rule. This addition allows for better differentiation between UAS and SATA drives, reducing false identification and minimizing the need for multiple checks. 
  • Resolved issues highlights
    • Fixes for incidents triggered during file hover actions, false screen-capture detections, and blocked printing with specific fonts.
    • OCR and classification rendering fixes, including issues with Microsoft Office apps, web form interactions, and Gmail viewing errors.

Upgrade notes

  • Supported upgrade paths: 11.10.200, 11.10.300, and 11.11.2 → 11.12.0
  • Updated third-party libraries: OpenSSL 3.3.1, libxml2 2.12.5, and 7-Zip 23.01​​​

See the Knowledge Base article Supported platforms for Trellix Data Loss Prevention Endpoint Complete - Windows for the full build details. Customized policies must be reviewed and manually updated where necessary.

Trellix DLP Extension 11.12.0

This release introduces critical stability and performance updates for improved policy management, classification detection, and administrative control.

Key enhancements include:

  • Classification accuracy
    The classification tester now correctly detects sensitive data embedded in files, improving precision in content scanning. 
  • Improved admin permissions control
    Resolved an issue where users with limited server task permissions could access and execute unintended DLP and FRP server tasks. 
  • Simultaneous policy edit protection
    Fixed a rule set overwrite issue occurring when two administrators edited different policies simultaneously. 
  • Server performance optimizations
    Enhanced overall responsiveness and reduced server load by optimizing DLP server tasks and policy processing. 
  • Database log handling
    Resolved excessive temporary log generation from certain DLP scripts that caused disk usage spikes. 
  • UI and policy fixes
    • Corrected outdated Knowledge Base article links in the UI
    • Fixed macOS policy duplication errors
    • Corrected user information display issues under User Manager

Upgrade recommendation
This update is rated as "Recommended" and should be applied at the earliest convenience across all environments. See the Knowledge Base article Trellix on-premises product release cycle for full rating guidance.

Note: Always verify customized policies post-upgrade for compatibility and completeness.

For more information about these releases, see the following Release Notes and Installation and Product Guides:

For details about known issues, see the Known Issues articles below:

Powered by Zendesk