Installation downgrade procedure for Trellix DLP Network Prevent

There is no direct rollback or downgrade mechanism supported for DLP Network Prevent. Reverting to an earlier release requires a complete re-installation of the appliance ISO/OVA, re-registration with Trellix ePO, and a manual extension downgrade on the Trellix ePO server.

Prerequisites and data backup

1. Back Up ePO policies: Export all DLP Appliance Management and Common Appliance Management policies, and policy assignments, through Trellix ePO to prevent configuration loss.

2. Download Required Bundles: Ensure you have the target/compatible version of both:

• The DLP Appliance ISO/OVA package.

• The compatible DLP Appliance Management Extension .zip bundle for Trellix ePO.

Task

1. Downgrade the ePO Extensions: Perform this on the ePO server console.

   1. Log in to the Trellix ePO console and navigate to Menu → Software → Extensions.

   2. Select the existing DLP Appliance Management Extension and click Remove.

   3. Click Install Extension and select the target compatible .zip extension bundle.

   4. Install the required extensions in order:

      • Common UI Package

      • Appliance Management Extension

      • DLP Appliance Management Extension

   5. Confirm the lower version extension displays properly under the Extensions list.

2. Reinstall the DLP Appliance software: Complete system wipe and fresh installation.

   1. Boot the DLP Appliance using the target version ISO image or deploy a fresh virtual machine using the target OVA file.

   2. Access the Upgrade / Installation Menu from the console/SSH interface.

   3. Select the re-installation option (Option 5: Reinstall without retaining configuration).

   4. Complete the OS installation and reboot the appliance.

3. Re-register appliance and restore configuration: Connect appliance back to Trellix ePO.

   1. Access the appliance local console menu and run the Setup Wizard.

   2. Provide the ePO server IP/hostname, credentials, and port details to re-register the appliance with Trellix ePO.

   3. In the ePO console, verify that the appliance appears in the System Tree and shows healthy communication under Appliance Management.

   4. Re-assign or import your backed-up policies and push them to the reinstalled appliance.