The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

EDRF On-prem system requirements

Updated
  • Updated on Sep 15, 2026
  • Published on Aug 26, 2026
  • 1 minute(s) read
Prev Next

Component

Requirement

TrellixePO

5.10 service pack 1 update 4 or later

DXL broker

6.1.3 or later

HX server

10.0.4 or later

EDRF Client

50.1 or later

EDRF ePO extension

2.1.1 or later

EDR Telemetry Store virtual appliance

25.11.0 or later

  • vCPU cores: 4

  • Memory: 8 GB

  • Storage: 254 GB (The disk is thin-provisioned)

  • Network: 1 Network Interface Card (NIC)

  • Virtualization: Tested with VMware ESXi Hypervisors and Nutanix

    • Version 26.03 or earlier: Supports VMware ESXi only.

    • Version 26.06 or later: Supports both VMware ESXi and Nutanix Acropolis Operating System (AOS) version 7.3 or later.

Note

The virtual appliance can scale up to 16 vCPU cores and 64 GB of memory. You can also add up to 12 TB of additional storage, which is the approximate size required to store 30 days of trace data from 10,000 endpoints.

For more information, see Increase or add storage on a virtual appliance.

Trellix EDR with Forensics On-Prem - Add-On 25.11 package contents

  • EDR Telemetry Store virtual appliance (OVA package)

  • HX Historical Search module (.cms file)

For supported platforms, see the Trellix Knowledge Base (KB) article, Supported Platforms for Trellix EDR with Forensics - KB000014084.