The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages expected in early November 2026. We hope you enjoy the updated experience.

Deploy custom Endpoint Security 10.7.x installation packages generated by Endpoint Security Package Designer 10.7.x

Prev Next

Use Package Designer 10.7.x to generate custom Endpoint Security 10.7.x installation packages that you can deploy to your endpoints with Trellix ePO - On-prem 5.10.x , 5.9.x or a third-party deployment tool.

Why use Package Designer

Package Designer lets you generate custom installation packages that:

  • Meet specific requirements — For example, preconfigure port exclusions to ensure that vital communications are not blocked when Firewall is installed, or preconfigure settings required for compliance with security regulations.

  • Replace the default settings with custom settings

  • Install Endpoint Security with settings in place — Settings take effect as soon as installation is complete, rather than waiting for the first policy enforcement.

  • Reduce the size of the installation package.

  • Remove unneeded files.

How Package Designer works

The default installation package contains...

Package Designer 10.7 lets you...

Trellix Default settings

Replace them with preconfigured, custom settings

Installers required to install Endpoint Security:

  • All product modules

  • On 64-bit and 32-bit Windows operating systems

  • Any required monthly updates and Hotfixes

Remove unused installers for:

  • Product modules you don't plan to install

  • 64-bit or 32-bit installers

  • Monthly updates and Hotfixes

To generate the custom installation package, you can run Package Designer on an endpoint where Endpoint Security 10.7.x is installed. Package Designer uses the current settings and installation packages on the endpoint as the source for the custom package. You can also run Package Designer on any endpoint that has access to the installation files and policy settings you plan to include in the custom package. Deploy the custom package to endpoints using a Trellix ePO - On-prem deployment task or a third-party deployment tool.

Best practice: To prevent a policy enforcement from overwriting the custom settings, run Package Designer on an unmanaged endpoint. Alternatively, you can customize the settings using Trellix ePO - On-prem, push the updated settings to the endpoint where Package Designer is installed, then run Package Designer on the endpoint.

Package Designer 10.7 is required to customize packages for Endpoint Security 10.7.x.

Before you begin

  • If they are not available in the Software Catalog (Software Manager on Trellix ePO - On-prem 5.9.x), download these installation packages from the Trellix Product Downloads site:

    • Endpoint Security Package Designer Version 10.7.x.xxxx

    • Endpoint Security Platform – Full Install Version 10.7.x.xxxx (Required for Threat Protection, Firewall, and Web Control)

    • Endpoint Security Threat Prevention – Full Install Version 10.7.x.xxxx

    • Endpoint Security Firewall – Full Install Version 10.7.x.xxxx

    • Endpoint Security Web Control – Full Install Version 10.7.x.xxxx

    • Endpoint Security Adaptive Threat Protection – Full Install Version 10.7.x.xxxx (Requires Threat Protection )

    Best practice: For optimal performance and protection, install the same version of the Endpoint Security modules or upgrade all modules to the latest version. All Endpoint Security modules installed or upgraded on a system should originate from the same source package, avoiding a mix and match of installed module versions.

  • On the endpoint where you plan to run Package Designer:

    • Install Package Designer 10.7.x.

    • Install Endpoint Security 10.7.x, or make sure the endpoint has access to the installation packages.

    • Configure settings on the endpoint as needed, or make sure the endpoint has access to the custom settings.