Trellix Endpoint Security Agent (HX) 35.31.44 is now available for download from our Dynamic Threat Intelligence (DTI) Cloud.
This release includes a security vulnerability fix:
- Resolved an issue with improper input validation where access to the fekern.sys driver is now restricted to the local system. Memory audits now restrict dumping of virtual memory for critical Windows processes.
For more information, see the Release Notes and Security Bulletin.
Important:
- Trellix Endpoint Security Agent (HX) 35.31.44 requires a minimum Endpoint Security Server (HX) version of 5.3.3 and supports Windows operating system environments.
- Trellix Endpoint Security Agent (HX) 35.31.44 and future releases no longer support upgrades from Trellix Endpoint Security Agent (HX) software versions earlier than version 34.28.31.
There are two options for upgrading to version 35.31.44 from a version that is earlier than 34.28.31:-
Option 1: Uninstall the previous version and install Trellix Endpoint Security Agent (HX) software version 35.31.44 as a fresh install.
-
Option 2: Upgrade from the previous version to Trellix Endpoint Security Agent (HX) 34.28.31 first, and then upgrade to version 35.31.44.
-
Option 1: Uninstall the previous version and install Trellix Endpoint Security Agent (HX) software version 35.31.44 as a fresh install.
- When upgrading Endpoint Security Agent (HX), all existing data in the Real-time Event database on the endpoint is retained. After the upgrade completes and the Agent is restarted, the Real-time Event data is appended to existing data in the Real-time Event database. Trellix recommends completing all current incident response investigations before upgrading the Endpoint Security Agent (HX) software. If you have contained hosts, Trellix recommends that you exclude them from Agent upgrades because the upgrade process temporarily un-contains the endpoint; selected hosts can be excluded from an upgrade.
For more information, see the following documentation:
- End-of-Life versions: Trellix Product End-of-Life information
- Supported platforms: Supported platforms for Trellix Endpoint Security Agent (HX)
- Supported upgrade paths: Supported upgrade paths for Trellix Endpoint Security (HX) Server and HX Agent from legacy versions
Note: To receive information about product updates, sign up for the Support Notification Service.
For instructions, see the Thrive Portal User Guide and navigate to Profile and Settings > My Settings > Manage Support Notification Services (SNS) subscription preferences.