The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Guest images

Prev Next

Guest images are virtual machine snapshots used to evaluate suspicious traffic for a variety of environments, applications, and files. They let you test traffic and software, analyze results, and detonate malware in a controlled environment where they cannot damage your assets. The number of virtual environments you can run depends on the appliance model you have.

Guest images are factory installed and tested on the File Protect appliance. You can update guest images when updates become available, or you can set up automatic updates so you are always using the most recent guest images.

Trellix provides an updated set of guest images with each new release and strongly recommends you use the full set of guest images provided in each release without modifying the set.

Note

For detailed information about guest images commands, see the CLI Command Reference.