Release summary
This release enhances data protection monitoring, compliance, and core administrative control for organizations using Trellix DLP Endpoint for macOS.
Integrates with OpenSSL to comply with the FIPS 140-3 standard.
Extends macOS data protection policies to monitor, block, or control classified content copied, uploaded, or synced to personal iCloud storage.
Introduces Self Protection on macOS to prevent unauthorized tampering, process termination, or service disruption.
Supports Brazil’s updated alphanumeric Cadastro Nacional da Pessoa Jurídica (CNPJ) format to ensure continuous detection and protection of Brazilian corporate identification numbers.
Important
Post-upgrade configuration: setting shared passwords and applying DLP policies
Following an extension upgrade to Trellix DLP Extension 11.13.2, administrators must configure Quarantine and Challenge-Response passwords to ensure proper policy enforcement and maintain secure communication between the Trellix ePolicy Orchestrator (ePO) server and managed systems.
The extension update also adds a revised RSA encryption mechanism for stored evidence files. For more information, see article 000015954.
Release rating
Recommended
This release includes minor enhancements, performance optimizations, cosmetic UI fixes, or minor bug resolutions that do not affect core security or system stability.
Action required: Recommended
Customer action: Optional
Administrators can install these at their convenience or skip them if the specific changes do not apply to their environment.
What’s new
FIPS 140-3 compliance
Trellix DLP Endpoint for macOS integrates with OpenSSL to comply with the FIPS 140-3 standard. This integration automatically activates FIPS 140-3 mode at runtime across enterprise systems without manual configuration. All operations comply with federal security mandates and enterprise security standards.
Through this standard, all hardware, software, and firmware modules meet rigorous, independently tested requirements for encryption, key management, and tamper resistance.
For more information, see FIPS 140-3 compliance in Trellix DLP Network and Trellix DLP Discover.
Support for iCloud Drive protection
Monitors and blocks classified content copied, uploaded, or synchronized to iCloud storage on macOS devices. This feature prevents unauthorized exfiltration, tracks data movement, and enforces corporate security policy compliance.
For more information, see Preventing data transfer to iCloud Drive.
Self Protection on macOS
Self Protection to safeguard the agent against unauthorized tampering, process termination, or service disruption by local users, administrative accounts, and malicious processes.
On macOS devices with Endpoint Security for macOS (ENSM) installed, Self Protection is governed by the ENSM policy rather than the DLP Client Configuration.
Note
Self Protection on macOS is enabled by default.
For more information, see Preventing end-users from changing DLP Endpoint for macOS settings.
macOS Golden Gate version 27 support
Trellix DLP Endpoint for macOS now supports Golden Gate version 27. With this support, administrators can use Printer Protection rules to protect sensitive data transfer.
Support for Cadastro Nacional da Pessoa Jurídica (CNPJ) alphanumeric format
Trellix DLP now supports Brazil's updated Cadastro Nacional da Pessoa Jurídica (CNPJ) format, mandated by the Brazilian Federal Revenue. DLP supports both the legacy numeric and the new alphanumeric format of CNPJ.
For more information, see the Classification Reference Guide.
Platform updates
Platform | Version |
|---|---|
macOS | Golden Gate (Version 27) |
macOS | Tahoe (Version 26) |
macOS | Sequoia (Version 15) |
Component updates
Library | Version |
|---|---|
OpenSSL | 3.5.7 |
Resolved issues
Issue ID | Description |
|---|---|
DLPX-5338 | Agent package download failed on Trellix ePO On-premises when browser extension was installed. Some of the websites took longer than the expected to load webpages. |
DLPX-5497 | DLP for macOS with the Outlook Add-in enabled prevented emails from being sent in Outlook office 365 for macOS. |
DLPX-5541 | Failed to download files from a few URLs when the DLP browser extension was enabled. |
DLPX-5603 | DLP for macOS Web Protection rules failed to block file uploads on social networking sites such as Telegram despite the URL being configured in the block list. |
DLPX-5679 | DLP Outlook Add-in prevented email from being sent. |
DLPX-5688 | DLP for macOS caused WhatsApp Web chats to fail loading after scanning the login QR code. |
DLPX-5801 | DLP for Mac blocked compressed (7Z) files from syncing with Google Drive even when Google Drive was not selected in the Cloud Protection rule configuration. |
DLPX-6021 | DLP Discovery Scan classification matched sensitive data patterns (such as Canadian SIN) across multiple spreadsheet cells rather than within individual cell boundaries. |
DLPX-6027 | The DLP web browser extension blocked form submissions on websites that were added to the Web Protection ignore list, causing pages to load indefinitely. It also prevented Azure Databricks from loading correctly into the browser. |
DLPX-6039 | DLP for macOS displayed an Evidence Share connection error pop-up during Discovery Scan even when the Evidence Share feature was disabled in the policy. |
DLPX-6054 | The DLP web browser extension did not honor URLs configured in the Web Protection ignore list. |
DLPX-6095 | Printer Protection was non-functional on these versions of macOS due to security updates:
Printer protection rules failed to fetch the logged in username. |
DLPX-6132 | The DLP browser extension in Microsoft Edge on macOS caused the send button in Microsoft Copilot to become grayed out and non-functional. |
DLPX-6133 | Zip files scan failed while uploading to an external drive. |
DLPX-6189 | Google Chrome experienced degraded performance when the DLP browser extension was enabled, preventing users from selecting Comment or uploading files in JIRA and timesheet applications. |
DLPX-6249 | Bluetooth Removable Storage Protection rule failed to block files. |
DLPX-6251 | macOS DLP Outlook Add-in blocked all emails sent from Outlook client app and web app. |
DLPX-6266 | Unable to block file upload to https://m365.cloud.microsoft/chat. |
DLPX-6302 | Discovery scan failed to auto classify files beyond the second iteration. |
DLPX-6349 | Web Protection rule failed to work on macOS and the internal URLs did not load when the browser extension was installed. |
DLPX-6350 | DLP for macOS Browser Extension caused upload failure on claude.ai and rendering issues on booking.com site. |
DLPX-6504 | DLP Endpoint for macOS browser extension caused upload failure on Lovart.ai and ServiceNow websites. |
DLPX-6561 | macOS DLP Add-in blocked all mails sent from Outlook app and web. |
Known issues
For a complete list of known issues, see Data Loss Prevention Endpoint 11.x.x Known Issues (KB89301).
Upgrade and installation information
Release information
Release date: November 5, 2026
Build information:
Component | Build number |
|---|---|
DLP Endpoint for macOS | 11.13.2.72 |
DLP Extension | 11.13.2.48 |
Prerequisites
Trellix DLP Endpoint for macOS requires one of the following operating system versions: macOS Sequoia, macOS Tahoe, or macOS Golden Gate.
If ENSM is deployed on the target device, verify that your ENSM policy includes Self Protection configurations before starting the upgrade.
Signed-in and active iCloud accounts are required on endpoints targeting Cloud Protection Rules for iCloud.
Review supported platform requirements before deployment.
Supported upgrade path
The following table lists the supported upgrade paths to the current release.
Current version | Supported upgrade path |
|---|---|
11.11.x | 11.11.x → 11.13.2 |
11.13.0 | 11.13.0 → 11.13.2 |
Deprecated items
There are no deprecated items in this release.
Additional information
Trellix Thrive: Access the unified portal for technical support, product downloads, support case management, diagnostic tools, knowledge base articles, product training, webinars, and community interaction.
Note
Access to the Trellix Thrive Portal requires login using valid Trellix customer support, partner, or employee credentials.
Trellix DLP Endpoint for mac Documentation: For detailed technical information, including product guides, release notes, installation instructions, and configuration Guidelines of DLP Endpoint, visit our documentation portal.
Rollback information: Rollback and Recovery procedures.