The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Endpoint containment

Prev Next

Endpoint containment is a powerful weapon for preventing further compromise by an endpoint. Contained endpoints are blocked from communicating with other host endpoints in your enterprise and can only communicate with the Endpoint Security (HX) and DMZ server that manage them and any other hosts you have defined in the containment whitelist. You can access and control the containment feature using the Endpoint Security (HX) Web UI.

See Configuring containment for information on configuring endpoint containment through the Endpoint Security (HX) Web UI and see Containment overview for more information about managing containment.