Trellix Data Loss Prevention Endpoint for Windows 11.10.0 Release Notes

This is solely for informational purpose, there is no action required. You can continue to secure your organization with Trellix DLP Endpoint as usual. You will notice the following changes in the software:

As Trellix continues to evolve, you will begin to see our solutions reflect our new name and brand. In this release, you will notice the following changes in the software. This rebranding change requires an effort from your end if your enterprise manages root certificate updates manually.

Certificate update changes

As part of rebranding, the certificates used to sign our software have been updated. If your enterprise automatically updates root certificates, the software update or installation does not require any additional effort. However, if your enterprise manages root certificate updates manually, you need to install the new intermediate and root certificates.

For information about downloading and installing the certificates, see KB91697.

Release date - February 1, 2023

Release builds:

For the specific build numbers, see Product release information in KB68147.

Trellix DLP 11.10.0 is a feature release version. New features, which include customer-raised product ideas are added only to the feature release versions. The most recent Long-Term Support release version of Trellix DLP Endpoint is 11.6.600. As such, version 11.10.0 doesn't end support for any previous release.

For more information about different kinds of releases, see KB91807.

For additional information on supported platforms, environments, and operating systems, see KB68147.

This release introduces new features or improves existing features:

Regex case sensitivity — To apply case sensitivity with any regular expression, the regex pattern must begin with ?i. You can also edit the existing regex pattern and append ?i at the beginning of the pattern. To enable regex case sensitivity, select the Use default agent behavior for regex checkbox in Menu → Policy → Policy Catalog → Data Loss Prevention <version> → Windows Client Configuration → Default Windows Client Configuration → Edit → Advanced Configuration → Advanced Pattern Settings.

Hit Highlight — You can now configure match count highlighting in the Shared Storage and Evidence page of the client configuration policy in the Classification matches file field.

The match count file shows the Total Match Count and highlights the matches that are hit. The maximum number of hit highlights displayed depends on the option set in this field and shows the matches that are hit in a top-down order. If the total match count exceeds the configured value, the matches that are hit beyond the configured value aren't highlighted.

Adobe 64-bit support - Acrobat Reader DC 64-bit is now supported by Trellix DLP Endpoint.

Email recipient threshold - You can now define thresholds for the To, Cc, Bcc, Cumulative, and Cumulative (Ignored Bcc) fields to monitor and limit emails from being sent to multiple email recipients.

Threshold Violated Details - In the DLP Incident Manager, incidents triggered by threshold violations now display a count of the recipients' domains and emails that exceeded the threshold.

User notification - By using the %t and %e variables, you can now create user notification when the matched attachments or email addresses are violated.

Ignored Processes - Trellix DLP Endpoint can now exclude processes that are specific to file tracking. To ignore a process, go to Menu → Policy → Policy Catalog → Data Loss Prevention <version> → Windows Client Configuration → Default Windows Client Configuration → Edit → Content Tracking → Ignored Processes.

Valid wildcard support - You can use wildcard characters, such as ., ?,*, and + in the regex pattern to represent 0 or 1 or more characters when excluding files and folders from scanning.

Enhanced CSV file import - Trellix DLP Endpoint now supports importing user information from CSV files without including top-level domain (TLD) validation. An example for top-level domain (TLD) is .com.

PDF print protection - Trellix DLP Endpoint now monitors and prevents sensitive PDF documents from being printed from Google Chrome and Microsoft Edge.

Manifest v3 compatibility - Trellix DLP Endpoint Extension is now Manifest v3 (MV3) compatible.

For a list of current known issues, see: Trellix Data Loss Prevention 11.x.x Known Issues (KB89301).

This update resolves known issues.

For the DLP Extension related resolved issues, see the Trellix Data Loss Prevention Extension 11.10.5 Release Notes.