Release summary
Trellix DLP Network Monitor release 11.11.200 includes new and enhanced features, and resolved issues.
Every update release is cumulative and includes all features and fixes from the previous release. We recommend that you always upgrade to the most current update.
Important
Review these sections before upgrading or deploying the release.
FIPS 140-3 compliance
Trellix DLP integrates with OpenSSL to comply with the FIPS 140-3 standard.
Critical vulnerability fixes
Updates Linux kernel to version 5.15.211 and updates other third party software.
Compatibility issues
Trellix DLP Network Monitor software installed with the newer version of the Trellix DLP Extension cannot be reverted to the older version without reverting the Trellix DLP Network Monitor version first.
Requires customer actions
Post-upgrade configuration: setting shared passwords and applying DLP policies
Following an extension upgrade to Trellix DLP Extension 11.13.2, administrators must configure Quarantine and Challenge-Response passwords to ensure proper policy enforcement and maintain secure communication between the Trellix ePolicy Orchestrator (ePO) server and managed systems.
The extension update also adds a revised RSA encryption mechanism for stored evidence files. For more information, see article 000015954.
Deprecation of OpenLDAP support in Q1 2027
Trellix will remove OpenLDAP Directory server support in Trellix DLP Network Monitor and Monitor, aligning with Trellix ePO's planned deprecation of OpenLDAP support in Q1 2027. For features that require LDAP integration, DLP continues to support Microsoft Active Directory through Trellix ePO.
For more information, see KB85292.
Release rating
Recommended
This release includes minor enhancements, performance optimizations, cosmetic UI fixes, or minor bug resolutions that do not affect core security or system stability.
Action required: Recommended
Customer action: Optional
Administrators can install these at their convenience or skip them if the specific changes do not apply to their environment.
What’s new
This release adds support for the following features:
FIPS 140-3 compliance: Trellix DLP integrates with OpenSSL to comply with the FIPS 140-3 standard. This integration automatically activates FIPS 140-3 mode at runtime across enterprise systems without manual configuration. All operations comply with federal security mandates and enterprise security standards.
Through this standard, all hardware, software, and firmware modules meet rigorous, independently tested requirements for encryption, key management, and tamper resistance.
For more information, see FIPS 140-3 compliance in Trellix DLP Network and Trellix DLP Discover.
IP-based policy management: You can now define and enforce Web Protection policies on IP addresses or IP ranges. This functionality is crucial for customers who manage user access based on network topology rather than traditional directory services (such as Active Directory or LDAP structures).
This allows DLP Administrators to create granular policy exceptions and inclusions using IP addresses. This feature allows the selection of IP addresses as a condition or exception within Web Protection rules, enabling differentiated handling (block or allow) of classified data shared over the web.
For more information, see IP-based policy management in Trellix DLP Network Appliances.
Support for alphanumeric CNPJ format in DLP Policies: Trellix DLP now supports Brazil's updated Cadastro Nacional da Pessoa Jurídica (CNPJ) format, mandated by the Brazilian Federal Revenue. Trellix DLP supports both the legacy numeric and the new alphanumeric format of CNPJ.
For more information, see the Classification Reference Guide.
Resolved issues
Issue ID | Description |
|---|---|
DLPN-18923 | Active Directory credentials failed to authenticate through SSH on Trellix DLP Network Monitor after upgrading to version 11.11.100. |
DLPN-18994 | Trellix DLP Network Monitor appliances crashed with an out-of-memory error when collecting diagnostic logs, even when the appliance was not processing any network traffic. |
DLPN-19065 | Trellix DLP Network Monitor intermittently failed to retrieve the User Principal Name (UPN) and primary email address from Active Directory, resulting in missing user details in DLP incidents. |
DLPN-19004 | Trellix DLP Network Monitor intermittently failed to scan traffic with an internal server error when resolving end-user based policies during LDAP configuration updates. |
Known issues
For a complete list of known issues, see Trellix Data Loss Prevention 11.x.x Known Issues (000013475).
Upgrade and installation information
Release information
This section details the release date, build numbers and installation packages included in this release.
Release date: November 5, 2026
Build information:
Component | Build number |
|---|---|
VMware vSphere virtual system | Trellix-MS-11.11.200-3699.100.ps.hw10.hdd.ova |
Hardware Appliance | Trellix-MS-11.11.200-3699.100.iso |
Nutanix Acropolis Hypervisor (AHV) | Trellix-PS-11.11.200-3699.100.iso |
DLP Appliance Management extension — build 11.12.0.4
Data Loss Prevention extension — build 11.13.2.48
For all resolved issues in DLP Extension, see Trellix Data Loss Prevention Extension 11.13.x Release Notes.
Proprietary Linux OS based on AlmaLinux 9
Trellix Agent — version 5.8.5
Note - Trellix Agent is built into the appliance software and can't be updated through ePO - On-prem.
Appliance Management extension — build 1.4.4.2
Common UI extension — build 1.3.0.258 or later
Prerequisites
None
Upgrade impact
No impact
Supported upgrade path
The following table lists the supported upgrade paths to the current release. If your environment is running in one of the versions listed above, follow the corresponding upgrade path to successfully upgrade to version 11.11.200.
Current version | Supported upgrade path |
|---|---|
11.10.500 | 11.10.500 → 11.11.200 |
11.10.700 | 11.10.700 → 11.11.200 |
11.11.0 | 11.11.0 → 11.11.200 |
11.10.700 | 11.11.100 → 11.11.200 |
11.11.100 | 11.11.100 → 11.11.200 (capture) |
11.10.500 | 11.10.500 → 11.10.700 → 11.11.0 → 11.11.100 → 11.11.200 |
Note:
Systems running versions prior to 11.11.100 with an active capture disk cannot upgrade directly to 11.11.200. You must first upgrade to version 11.11.100 before applying the 11.11.200 update.
Data Purge Warning: Upgrading Trellix DLP Network Monitor directly from version 11.0.x to 11.11.200 on appliances with a capture disk will permanently delete all existing capture data. This occurs because PostgreSQL is upgraded to version 16.11 and support for legacy PostgreSQL 10.x versions has been removed.
Recommended Action: Upgrade to 11.11.100 first then upgrade to 11.11.200.
Deprecated items
None
Additional information
Trellix Thrive: Access the unified portal for technical support, product downloads, support case management, diagnostic tools, knowledge base articles, product training, webinars, and community interaction.
Note:
Access to the Trellix Thrive Portal requires login using valid Trellix customer support, partner, or employee credentials.
Trellix DLP Network Monitor Documentation: For detailed technical information, including product guides, release notes, installation instructions, and configuration guidelines of Trellix DLP Network Monitor, visit our documentation portal at docs.trellix.com.