Trellix Intelligent Virtual Execution (IVX) Cloud Security - Commercial US, EU, CAN, APJ, and Gov instances will be upgraded to Release 26R3 beginning on October 6, 2026 at 07:00 a.m. UTC and completing on October 16, 2026 at 10:00 a.m. UTC.
Note: This upgrade does not require any service or portal downtime.
IVX Cloud 26R3 extends integration coverage, improves submission visibility, and simplifies integration health monitoring, helping administrators secure and audit a broader range of environments.
This release includes the following features:
- Slack Enterprise integration extended to EU and APJ regions
The Slack Enterprise integration is now available on IVX Cloud portals in the EU and APJ regions, in addition to the US region. This release also adds sign-in support through the Trellix IAM login interface, alongside the Okta login — giving administrators the flexibility to connect Slack Enterprise Grid instances using either authentication method.
Key capabilities and operational benefits include:- Connects regional IVX Cloud portals directly to Slack Enterprise Grid to adhere to local data compliance and auditing requirements
- Enables users to submit files and URLs for automated sandbox analysis directly from Slack conversations without leaving the messaging platform
- Supports sign-in through both Okta and Trellix IAM
- Delivers identical features and workflows across all supported global regions
- Submitter details added to integration submissions
The Submissions, Alerts, and Reports pages now display the submitter's email address across all supported integrations except Microsoft Azure — including Amazon S3, Salesforce, Slack, Slack Enterprise, SharePoint, OneDrive, Google Drive, Google Chat, Webex, Workday, Zendesk, Zoom, and others — allowing administrators to quickly identify who submitted a given file or URL.
- User and Email policy filtering for SharePoint and OneDrive integrations
Introduces policy filtering capabilities based on user identity attributes such as user name and email domain for SharePoint and OneDrive integrations. Organization administrators can now configure scanning rules that exclude internal user uploads or specifically target external file submissions. - ICAP integration for real-time file and web traffic inspection
IVX Cloud now supports the Internet Content Adaptation Protocol (ICAP), which lets you connect external proxies and Secure Web Gateways (SWGs) to submit web and file traffic directly to IVX Cloud for real-time inline scanning and sandboxing with no additional integration path required. - Bulk health check support for the Integration Health API
The /health/integration API endpoint now supports checking the health status of all integrations in a single call, with optional status, connector_type, and disabled_since filters. If no filters are applied, the endpoint returns all integrations with pagination. This removes the need to query each integration's health individually, making it easier to monitor integration status at scale — for example, when feeding integration health into a SIEM tool such as Splunk.
- Original Report ID and Report ID column filtering
The Submissions and Alerts pages now support filtering by the Original Report ID and Report ID columns, making it faster to locate specific submissions or alerts by report ID.
Key capabilities and operational benefits include:- Enables analysts to query and locate individual analysis reports or tracking IDs across the Submissions and Alerts tables
- Accelerates incident investigation by allowing analysts to correlate threat reports directly within the main dashboard views
- Extends consistent filtering capabilities across both the Submissions and Alerts interfaces
- Enhanced export reliability for Submissions and Alerts
Export performance and reliability have been improved for the Submissions and Alerts pages, so users can now download or export large datasets.