This notice is intended for customers who have configured allow-lists for Global Threat Intelligence (GTI) IP addresses.
Be advised that additional GTI IPv4 addresses have been added. The Knowledge article linked below has been updated to reflect the complete and current list of GTI IP addresses: Connecting to Global Threat Intelligence (GTI).
As GTI is a globally hosted cloud service, Trellix recommends allowing all published GTI IP addresses to ensure uninterrupted service. If your organization enforces strict outbound traffic controls, we strongly recommend allowing GTI traffic based on the destination host name.
If allowing traffic by destination host name is not feasible due to technical constraints, ensure that outbound access is permitted to all listed Public Cloud resource IPv4 addresses and IPv6 CIDR blocks. The Knowledge article referenced above contains the up-to-date list of all IP addresses required for GTI connectivity.