--- title: "Trellix Data Loss Prevention Network Prevent 11.11.200 On-premises Release Notes" slug: "clone-trellix-data-loss-prevention-extension-11-13-2-release-notes" tags: ["DLPNP 11.11.x"] updated: 2026-11-05T16:13:44Z published: 2026-11-05T16:13:44Z canonical: "docs.trellix.com/clone-trellix-data-loss-prevention-extension-11-13-2-release-notes" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.trellix.com/llms.txt > Use this file to discover all available pages before exploring further. # Trellix Data Loss Prevention Network Prevent 11.11.200 On-premises Release Notes ## Release summary Trellix Data Loss Prevention Network Prevent release 11.11.200 includes new and enhanced features, and resolved issues. Every update release is cumulative and includes all features and fixes from the previous release. We recommend that you always upgrade to the most current update. ## Important **Review these sections before upgrading or deploying the release.** - **FIPS 140-3 compliance** Trellix DLP integrates with OpenSSL to comply with the FIPS 140-3 standard. - **Critical vulnerability fixes** Updates Linux kernel to version 5.15.211 and updates other third party software. - **Compatibility issues** Trellix DLP Network Prevent software installed with the newer version of the Trellix DLP Extension cannot be reverted to the older version without reverting the Trellix DLP Network Prevent version first. - **Requires customer actions** **Post-upgrade configuration: setting shared passwords and applying DLP policies** Following an extension upgrade to Trellix DLP Extension 11.13.2, administrators must configure Quarantine and Challenge-Response passwords to ensure proper policy enforcement and maintain secure communication between the Trellix ePolicy Orchestrator (ePO) server and managed systems. The extension update also adds a revised RSA encryption mechanism for stored evidence files. For more information, see article [000015954](https://support.trellix.com/s/article/000015954). **Deprecation of OpenLDAP support in Q1 2027** Trellix will remove OpenLDAP Directory server support in Trellix DLP Network Prevent and Monitor, aligning with Trellix ePO's planned deprecation of OpenLDAP support in Q1 2027. For features that require LDAP integration, DLP continues to support Microsoft Active Directory via Trellix ePO. For more information, see [KB85292](https://support.trellix.com/s/article/KB85292?language=en_US). ### Release rating #### Recommended This release includes minor enhancements, performance optimizations, cosmetic UI fixes, or minor bug resolutions that do not affect core security or system stability. - Action required: **Recommended** - Customer action: **Optional** Administrators can install these at their convenience or skip them if the specific changes do not apply to their environment. ## What’s new This release adds support for the following features: - **FIPS 140-3 compliance**: Trellix DLP integrates with OpenSSL to comply with the FIPS 140-3 standard. This integration automatically activates FIPS 140-3 mode at runtime across enterprise systems without manual configuration. All operations comply with federal security mandates and enterprise security standards. Through this standard, all hardware, software, and firmware modules meet rigorous, independently tested requirements for encryption, key management, and tamper resistance. For more information, see [FIPS 140-3 compliance in Trellix DLP Network and Trellix DLP Discover](https://docs.trellix.com/data-and-email/docs/clone-fips-140-3-cryptographic-compliance-in-trellix-dlp-network-appliances). - **IP-based policy management:** You can now define and enforce Web Protection policies on IP address or IP ranges . This functionality is crucial for customers who manage user access based on network topology rather than traditional directory services (such as Active Directory or LDAP structures). This allows DLP Administrators to create granular policy exceptions and inclusions using IP addresses. This feature allows the selection of IP addresses as a condition or exception within Web Protection rules, enabling differentiated handling (block or allow) of classified data shared over the web. For more information, see [IP-based policy management in Trellix DLP Network Appliances](https://docs.trellix.com/data-and-email/docs/ip-based-policy-management-in-trellix-dlp-network-appliances). - **Support for alphanumeric CNPJ format in DLP Policies**: Trellix DLP now supports Brazil's updated Cadastro Nacional da Pessoa Jurídica (CNPJ) format, mandated by the Brazilian Federal Revenue. DLP supports both the legacy numeric and the new alphanumeric format of CNPJ. For more information, see the [Classification Reference Guide](https://docs.trellix.com/data-and-email/docs/brazil-cnpj-national-registry-of-legal-entities). ## Resolved issues | Issue ID | Description | | --- | --- | | DLPN-18923 | Active Directory credentials failed to authenticate via SSH on Trellix DLP Network Prevent after upgrading to version 11.11.100. | | DLPN-18994 | Trellix DLP Network Prevent appliances crashed with an out-of-memory error when collecting diagnostic logs, even when the appliance was not processing any network traffic. | | DLPN-19065 | Trellix DLP Network Prevent intermittently failed to retrieve the User Principal Name (UPN) and primary email address from Active Directory, resulting in missing user details in DLP incidents. | | DLPN-19004 | Trellix DLP Network Prevent intermittently failed to scan traffic with an internal server error when resolving end-user based policies during LDAP configuration updates. | ## Known issues For a complete list of known issues, see [Trellix Data Loss Prevention 11.x.x Known Issues (KB000013475)](https://support.trellix.com/s/article/000013475?language=en_US). ## Upgrade and installation information ### Release information This section details the release date, build numbers and installation packages included in this release. **Release date**: November 5, 2026 **Build information**: | Component | Build number | | --- | --- | | VMware vSphere virtual system | Trellix-PS-11.11.200-3699.100.ps.hw10.hdd.ova | | Windows Hyper-V | Trellix-PS-11.11.200-3699.100.HyperV_ps.zip | | Hardware Appliance | Trellix-PS-11.11.200-3699.100.iso | | Amazon Web Services | Trellix-PS-11.11.200-3699.100.AWS_ps.zip and Trellix DLP Network Prevent AMI | | Nutanix Acropolis Hypervisor (AHV) | Trellix-PS-11.11.200-3699.100.iso | - DLP Appliance Management extension — build 11.12.0.4 - Data Loss Prevention extension — build 11.13.2.48 For all resolved issues in DLP Extension, see [Trellix Data Loss Prevention Extension 11.13.x Release Notes](https://docs.trellix.com/data-and-email/docs/trellix-data-loss-prevention-11-13-x-release-notes). - Proprietary Linux OS based on AlmaLinux 9 - Trellix Agent — version 5.8.5 **Note** - Trellix Agent is built into the appliance software and can't be updated through ePO - On-prem. - Appliance Management extension — build 1.4.4.2 - Common UI extension — build 1.3.0.258 or later ### Prerequisites None ### Upgrade impact No impact ### Supported upgrade path The following table lists the supported upgrade paths to the current release. If your environment is running in one of the versions listed above, follow the corresponding upgrade path to successfully upgrade to version 11.11.200. | Current version | Supported upgrade path | | --- | --- | | 11.10.500 | 11.10.500 → 11.11.200 | | 11.10.700 | 11.10.700 → 11.11.200 | | 11.11.0 | 11.11.0 → 11.11.200 | | 11.10.700 | 11.11.100 → 11.11.200 | | 11.11.100 | 11.11.100 → 11.11.200 (capture) | | 11.10.500 | 11.10.500 → 11.10.700 → 11.11.0 → 11.11.100 → 11.11.200 | > [!NOTE] > **Note:** > > - Systems running versions prior to 11.11.100 with an active capture disk cannot upgrade directly to 11.11.200. You must first upgrade to version 11.11.100 before applying the 11.11.200 update. > - Data Purge Warning: Upgrading Trellix DLP Network Prevent directly from version 11.0.x to 11.11.200 on appliances with a capture disk will permanently delete all existing capture data. This occurs because PostgreSQL is upgraded to version 16.11 and support for legacy PostgreSQL 10.x versions has been removed. > > Recommended Action: Upgrade to 11.11.100 first then upgrade to 11.11.200. ## Deprecated items None ## Additional information - [Trellix Thrive](https://thrive.trellix.com/): Access the unified portal for technical support, product downloads, support case management, diagnostic tools, knowledge base articles, product training, webinars, and community interaction. > [!NOTE] > Note: > > Access to the Trellix Thrive Portal requires login using valid Trellix customer support, partner, or employee credentials. - [Trellix DLP Network Prevent Documentation](https://docs.trellix.com/data-and-email/docs/data-loss-prevention-on-prem): For detailed technical information, including product guides, release notes, installation instructions, and configuration guidelines of Trellix DLP Network Prevent, visit our documentation portal at [docs.trellix.com](http://docs.trellix.com). - [Rollback information](https://docs.trellix.com/data-and-email/docs/installation-downgrade-procedure-for-trellix-dlp-network-appliances) - [Supported Platforms](https://support.trellix.com/s/article/KB87112?language=en_US)