Important
On a Network Security sensor or sensor-enabled Network Security integrated appliance, information about guest images will not be available because they reside on the Intelligent Virtual Execution - Server compute nodes in a TrellixMVX deployment. When sensors are enrolled with the MVX cluster, the sensor submits suspicious traffic samples to a Intelligent Virtual Execution - Server compute node in the MVX cluster for further analysis.
Note
On a Network Security sensor or sensor-enabled Network Security integrated appliance, you can clean up disk space reserved for guest images by using the
guest-image purge retired-versionandguest-images partial-downloadcommands.
Guest images are virtual machine snapshots used to evaluate suspicious traffic for a variety of environments, applications, and files. They let you test traffic and software, analyze results, and detonate malware in a controlled environment where they cannot damage your assets. The number of virtual environments you can run depends on the appliance model you have.
Guest images are factory installed and tested on the Network Security appliance. You can update guest images when updates become available, or you can set up automatic updates so you are always using the most recent guest images.
Trellix provides an updated set of guest images with each new release and strongly recommends you use the full set of guest images provided in each release without modifying the set.
Note
For detailed information about guest images commands, see the CLI Command Reference.