Important
Trellix IPS 11.1 release is CC certified and the review process for Trellix IPS 11.1 FIPS certification is currently in progress. The content mentioned in the guide on CC and FIPS compliance applies to CC certified software images as well.
The information in this document supplements content released in the Trellix Intrusion Prevention System 11.1 user documentation.
This document covers new features and enhancements that are supported in the following versions of Trellix IPS software:
Manager software version: 11.1.19.81
Signature set: 11.10.30.4
NS-series Sensor software version: 11.1.17.87
Note
Only NS9600, NS9500, NS7600, NS7500, NS3600, and NS3200 Sensors and Trellix IPS Manager Appliance (Linux) are CC certified.
NS3100, NS3200, NS3600, NS5100, NS5200, NS7150, NS7250, NS7350, NS7500, NS7600, NS9100, NS9200, NS9300, NS9500, and NS9600 Sensors: 11.1.17.82
The Manager and Sensor versions support features that are mandatory requirements for Federal Information Processing Standard (FIPS) and Common Criteria (CC) certification.
The above-mentioned Manager version (Manager Appliance Linux) and Sensor version (NS-series Sensor) are certified for new features for FIPS and CC.
Note
Do not use the Manager to set the inactivity option under Account Lockout via GUI. This way of managing account lockouts has not been evaluated for use in the Common Criteria configuration.