Trellix Intelligent Virtual Execution (IVX) - Cloud Commercial US, EU, CAN, APJ, and Gov instances will be upgraded to Release 26R1 beginning on March 25, 2026 at 07:00 UTC and completing on March 31, 2026 at 10:00 UTC.
Note: This upgrade does not require any downtime.
New features and enhancements which are part of 26R1
Enhanced security and data protection:
- Third-party Threat Intelligence: Block malicious files and URLs across chat, file shares, and enterprise apps by tapping into external threat feeds — without the overhead of storing a bulky, stale intelligence library. When a file or URL needs validation, we query your third-party feeds in parallel with our own Threat Intelligence for real-time, layered coverage.
- Trellix Data Loss Prevention (DLP) for Microsoft Teams: In our first of many to come, we are extending our DLP analysis to automatically scan external Microsoft Teams chats to protect sensitive information shared across non-privileged channels according to established DLP policies.
Note: This is not available in Gov environments. Additionally, for Commercial environments, availability is currently limited to the US region.
Increased visibility and troubleshooting efficiency:
- Scan health monitoring: Admins across Box, S3, Azure Blob Storage, and Google Workspace can now see a real-time count of active users, folders, chat groups, and channels under monitoring — giving full visibility into scan coverage and status.
- Connection failure diagnostics: When a connection drops, the system surfaces what failed and when, cutting troubleshooting time and removing the guesswork.
More accurate verdict statuses:
- Unknown verdict: Triggered when all analysis engines fail or timeout and lack sufficient analysis to support a confident result.
- Analysis delayed / timeout status: When a submission exceeds 15 minutes due to traffic or other delay causing issue, it is now flagged to set clear expectations that results may still be updated as engines re-engage. Those that eventually complete with all engine results will be marked Delayed while those stuck or continuing to wait for results for longer than 15 minutes will be marked Timeout.
- Updated JSON reporting: A new field has been introduced workflow_status to reflect these intermediate statuses.
Note: To receive information about product updates, sign up for the Support Notification Service.
For instructions, see the Thrive Portal User Guide and navigate to Profile and Settings > My Settings > Manage Support Notification Services (SNS) subscription preferences.