Trellix Data Loss Prevention Discover 11.10 Update 5 release includes new features and resolved issues.
Every update release is cumulative and includes all features and fixes from the previous release. We recommend that you always upgrade to the most current release.
Release Details of Trellix DLP Discover 11.10 Update 5 (11.10.500)
Release Date - October 25, 2023
Release Builds:
Trellix Data Loss Prevention Discover build - 11.10.500.112
Trellix DLP extension build - 11.10.100.8. For all new features and resolved issues in DLP Extension, see the Trellix Data Loss Prevention Extension 11.10.100 Release Notes.
Rating
The rating defines the urgency for installing this update.
Recommended
This release is recommended for all environments. Apply this update at the earliest convenience.
Data Loss Prevention (DLP) Long-Term Support Release
Important - is enhancing our Trellix DLP release process to better serve our customers' requirements. This is achieved via defining each release as either a Long-Term Support release or Feature Release. Feature release introduces new features, whereas, (LTS) Long-Term Support release allows customers (under tight change control) to maintain a stable Trellix DLP version without changes to functionality and existing features. The LTS release will include only security updates, bug fixes, and some optimization for the existing features by releasing only patches or hotfixes. As is currently the case, these releases will continue to be fully installable packages.
Note
The LTS latest release for Trellix DLP Discover is version 11.10.500 (11.10 Update 5) to ensure high quality before becoming the stable LTS build.
For more information about LTS releases, see 000012711.
Updated platform, environment, or operating system support
Starting with this release, Trellix Data Loss Prevention Discover is supported on Nutanix Acropolis Hypervisor (AHV). For information about installing the Trellix Data Loss Prevention Discover in the Nutanix hypervisor, see Deploy Trellix DLP Discover in Nutanix environment.
For additional information about supported platforms, environments, and operating systems, see 000012711.
End of Life dates of Data Loss Prevention versions
For more information about the End of Life (EOL) dates for Trellix DLP Discover versions, see 000004561.
New or changed features
Underscore in exact data matching (EDM)
Legacy tokenization treats underscore as an alphabet and expects both scanning and indexing documents to match underscore regardless of its position. Starting with this release, the underscore in EDM is:
Ignored if a word is surrounded by an underscore.
Considered a word separator, if a word contains an underscore in between. For example, in the mail ID xxxx_yy@zz.com, underscore is considered a word breaker, and the mail ID is divided into two tokens, "xxxx" and "yy@zz.com". An incident is reported even when the sample or scanned document has an underscore anywhere in a word, but the fingerprinted document doesn't.
The enhanced EDM solution offers the following advantages:
Improved scanning performance and speed
Reduced number of false positives generated
Note
To apply the change in underscore tokenization, reindex exact data match fingerprint with the EDMTrain tool.
Support for WebDAV protocol
Trellix DLP Discover supports WebDAV protocol for secure file transmission and file sharing specifically when transmitting sensitive DLP evidence. You can now configure your shared storage folder location to use WebDAV for copying evidence files.
The advantages of using WebDAV are:
Evidence is transmitted over HTTP/HTTPS protocol
Supports evidence copy on IIS
Host the file server on Windows FS or NFS
Supports password-based authentication
Considering embedded files as separate files during scans
This release introduces a change to the way how embedded files or files that contain sub-files are treated during the scan.
The text from embedded files is extracted into a separate file and scanned in isolation.
Every embedded file will have its own match details uploaded if there is a match.
The path of the parent and the relative path of the child file is mentioned in the evidence details.
Support for SharePoint Online scan
With this release, Trellix DLP Discover supports scanning files stored in SharePoint Online repositories. You can configure the SharePoint online scan under → → → .
Optical character recognition (OCR) library upgrade
Due to the upgrade in the OCR library, the RegDoc fingerprint count may vary, there is no action required.
Known issues
For a list of current known issues, see Trellix Data Loss Prevention 11.x.x Known Issues (000013474).
Resolved issues
This update resolves known issues.
For the DLP Extension related resolved issues, see the Trellix Data Loss Prevention Extension 11.10.100 Release Notes.
Important
This release is cumulative and contains fixes from all previous releases.
Reference | Resolution |
|---|---|
DLPD-4965 | Trellix DLP Discover fixes an issue when the remediation scan consumed all of the CPU resources or stalled out and wasn't completed. |
DLPD-4762 | Trellix DLP Discover fixes an issue where scan runs were showing timeout errors and the logs didn't record any error messages. |