---
title: "Endpoint Security (HX) feature support by platform"
slug: "endpoint-security-hx-feature-support-by-platform-1"
tags: ["HX 10.x", "Endpoint Security (HX)", "Product Usage"]
updated: 2026-09-10T15:12:22Z
published: 2026-09-10T15:35:32Z
canonical: "docs.trellix.com/endpoint-security-hx-feature-support-by-platform-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Endpoint Security (HX) feature support by platform

The table below lists operating system support for the major Endpoint Security (HX) software features.

| Feature | Operating system platform support |
| --- | --- |
| Windows | macOS | Linux |
| [Real-time indicator detection](/docs/real-time-indicator-detection-2) | Yes | Yes | Yes |
| [Custom indicator creation](/docs/real-time-indicator-detection-2) | Yes | Yes | Yes[[a]](/docs/endpoint-security-hx-feature-support-by-platform-1#ftn.id22179) |
| [Real-time indicator detection policy](/docs/real-time-indicator-detection-2) | Yes | Yes | Yes |
| [Exploit Guard](/docs/exploit-guard) | Yes | No | No |
| [Malware Protection](/docs/malware-protection-2) | Yes | Yes | Yes |
| [Enterprise Search](/docs/enterprise-search-2) | Yes | Yes | Yes[[b]](/docs/endpoint-security-hx-feature-support-by-platform-1#ftn.id22221) |
| [Data acquisitions](/docs/data-acquisitions-2) | Yes | Yes | Yes |
| [File acquisitions](/docs/file-acquisitions-2) | Yes | Yes | Yes |
| [Triages](/docs/triages) | Yes | Yes | Yes |
| [Endpoint containment](/docs/endpoint-containment) | Yes | Yes | Yes[[c]](/docs/endpoint-security-hx-feature-support-by-platform-1#ftn.id22263) |
| [Agent removal protection](/docs/endpoint-security-agent-hx-removal-protection) | Yes | No | No |
| [Agent proxy support](/docs/endpoint-security-agent-hx-proxy-use) | Yes | Yes | Yes |
| [[a]](/docs/endpoint-security-hx-feature-support-by-platform-1#id22179) version 4.8 or later supports the creation of custom indicator rules for Linux conditions (network events only). [[b]](/docs/endpoint-security-hx-feature-support-by-platform-1#id22221) version 5.2 or later and Agent version 34 or later supports Enterprise Search for Linux host endpoints. [[c]](/docs/endpoint-security-hx-feature-support-by-platform-1#id22263) version 5.2 or later and Agent version 34 or later supports containment of Linux host endpoints. |

: