The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Callback detectors

Prev Next

You can download callback detectors and push it to the Sensor.

Steps:

  1. Select Manager → <Admin Domain Name> → Trellix IPS Protection Status. Then, select Callback Detectors tab. The Callback Detectors tab is displayed.

    • The Active Manager Version displays currently available version.

    • The Latest Available Version displays the latest available version for you to download.

    Note

    You can also change the display settings to meet your requirements from the filter option.

    GUID-32E45181-7283-4FD0-BDE3-CC0C1602FC7B-low.jpg
  2. To download the latest callback detectors, select Download Latest Callback Detectors.

    A Confirmation dialog box appears, select OK. A status window opens to process the signature download.

  3. To download other versions of callback detectors, select Download Other Versions.

    The latest 10 versions are available for you to download. It displays the update details such as the Release Date and Size (MB) for that particular Version.

  4. Select the version required and click Download.

    The selected callback detectors become the active callback detectors on the Manager.

    To automatically download the callback detectors, refer to Automatic download of callback detectors.

    You can also view the active and latest callback detectors version in the Manager Summary monitor of the Manager Dashboard. In the Device Summary monitor, you can view the callback detectors version on specific devices.

    • If the active manager version is the latest available version, Download Latest Callback Detectors is disabled.

    • A GUID-60AB9567-6907-45E4-A83C-63D7A63BD6F5-low.jpg icon is displayed beside the Active Manager Version if the active callback detector version matches the latest callback detector version.

    • A GUID-139F8CC4-C48D-420E-A9F9-6C2995DD3390-low.png icon is displayed beside the Active Manager Version if the active callback detector version is older than the latest callback detector version.

    Note

    In an air-gap network, unregistered, or proxy server disabled Manager:

    • The Latest Available Version is displayed as ---.

    • A GUID-0445F67A-01F8-45D0-9AD9-6DD4B37D2EDA-low.png icon is displayed beside the Active Manager Version.

    • When you select Download Other Versions, the Download Specific Callback Detector Version does not display available versions of callback detectors.

    GUID-74A92B74-7472-4321-B7FB-E389610BBB57-low.jpg