To provide quality improvements and general enhancements related to malware detection, Trellix Guest Images (GI) Release 25.0202 will be made available for download from our Dynamic Threat Intelligence (DTI) as per the Download schedule detailed below.
Trellix strongly recommends enabling auto-update for GI releases and always using the latest GI release to ensure optimal security efficacy.
Download schedule
- April 14, 2026: Email Security – Server (EX), Malware Analysis (AX), File Protect (FX)
- April 16, 2026: Network Security (NX), Virtual Execution - Server (VX)
For Trellix offline GI updates and one-way license customers, Trellix GI Release 25.0202 will be available on the Offline Portal (OLP) no later than April 24, 2026.
GI 25.0202 Release highlights
-
Browser automation and framework updates
-
Chromium support: Enhanced browser automation framework for Chromium-based browsers with the following new features:
- Native support for Clickfix Captchas
- Clipboard data extraction and execution capabilities for script-based text
- Improved detection for SVG file formats
-
Chromium support: Enhanced browser automation framework for Chromium-based browsers with the following new features:
-
Expanded file type and reporting support
- MSBuild support: Support added for MSBuild Inline Task (.csproj) file types
-
API reporting: Upgraded API reporting functionality for a more comprehensive data output
-
Detection and security enhancements
- Strengthened threat identification: Improved detection capabilities for MSI installer files, ransomware executables, and information stealers
- Evasion defense: Refined detection of evasive files by analyzing process counts, memory allocation, and disk identifiers
- Web-based attack prevention: Optimized detection for HTML smuggling techniques
-
Office sample analysis: Increased detection accuracy for Microsoft Office samples specifically on Windows 10 profiles
-
macOS Intel Sonoma (osx14) GI profile
- Introduced a new macOS Intel Sonoma image featuring advanced detection support for various script files
- For virtual VX / EX, this profile requires hardware with CPUs that support the AVX-2 instruction set
GI 25.0302 (GI profiles - Windows (INTEL, AMD), OSX, Linux) is supported for the following appliances:
- Email Security - Server: 11.0.1
- File Protect: 11.0.1
- Malware Analysis: 11.0.1
- Network Security: 11.0.1
- Virtual Execution: 11.0.1
- Virtual VX on ESXi: 11.0.1
- Virtual EX on ESXi: 11.0.1
- ATD VX: 11.0.1
GI 25.0402 (GI profiles - Windows (INTEL)) is supported for the following appliance:
- Virtual VX on Nutanix 11.0.1
- Virtual EX on Nutanix 11.0.1
Note: The above Trellix OS releases enable automatic GI updates by default. The update to GI Release 25.0202 will therefore occur automatically on these systems unless automatic GI updates have been disabled.
For more information on this release, see Guest Images 25.0202 Release Notes.
Note: To receive information about product updates, sign up for the Support Notification Service.
For instructions, see the Thrive Portal User Guide and navigate to Profile and Settings > My Settings > Manage Support Notification Services (SNS) subscription preferences.