Release information

This version of the release supports features that are mandatory requirements for CC certification.

The software combination recommended by Trellix to use along with this release of NS-series Sensor software are as listed below:

Important

• Only NS9500, NS7600, NS7500, NS3600, and NS3200 Sensors and Trellix IPS Manager Appliance (Linux) are CC certified. For more information, see Trellix Intrusion Prevention System 11.1 FIPS and CC Certification Guide

• Trellix IPS 11.1 release is CC certified and the review process for Trellix IPS 11.1 FIPS certification is currently in progress. Trellix Intrusion Prevention System 11.1 FIPS and CC Certification Guide contains information on both FIPS and CC compliant images. The content mentioned in the guide for FIPS and CC compliance also applies to CC certified software images.

This version supports all the features that are supported in Trellix Intrusion Prevention System 11.1.x non-CC versions. Above and beyond that, it includes support for FIPS. If you wish to learn about features released in non-CC compliant versions of the product, please refer to the following release notes:

IPS 11.1.7.84-11.1.5.84 NS-Series Release Notes

IPS 11.1.7.71-11.1.5.72 NS-Series Release Notes

IPS 11.1.7.56-11.1.5.56 NS-Series Release Notes

IPS 11.1.7.41-11.1.5.44 NS-Series Release Notes

IPS 11.1.7.26-11.1.5.22 NS-Series Release Notes

IPS 11.1.7.3-11.1.5.2 NS-Series Release Notes

Note

Manager software version 11.1 is not supported on Dell-based Manager Appliances. Trellix recommends that you use Intel-based Manager Appliances instead.

Note

If you have a 9.x Manager managing 9.x NTBA, you should consider upgrading 9.x Manager to 10.1 or 11.1. If you plan to upgrade the Manager to 11.1, you need to first upgrade it to 10.1.19.56 and then to 11.1.

Upgrade support

Trellix regularly releases updated versions of the signature set. You can choose to automatically download and deploy the signature set in the Manager.

Important

Trellix IPS Manager 11.1.19.11 enhances the communication security between the Manager and Central Manager (CVE-2024-5671, CVE-2024-5731). You must upgrade the Manager and Central Manager to the same version to avoid alert synchronization issues.

Upgrade paths for Manager software versions

Note

Windows-based Manager is not CC certified.

Linux-based Manager:

Important

After the upgrade, make sure to reboot the Linux-based Manager.

Upgrade paths for Sensor software versions

Note

To upgrade the Sensor to the 11.1.17.13/11.1.17.14 version, contact Trellix support.

Important

• When you are downloading the Sensor software in the Manager, ensure that the Manager software release is equal to or higher than the Sensor software release. For example: If you are using 10.1.19.47 (10.1 Update 8) Manager, the Sensor software must be 10.1.17.63 (10.1 Update 8) or any lower version. You must not download the Sensor software 10.1.17.75 (10.1 Update 9) or a higher version using the 10.1.19.47 (10.1 Update 8) Manager.

• If you have already downloaded a higher release of Sensor software in an older Manager release, the Manager is in a bad state. To recover the Manager, manually delete the Sensor software files.

Pre-requisites for using the Sensor software 11.1.17.13 and 11.1.17.14

Upgrade Baseboard Management Controller (BMC) firmware

The 11.1.17.13 version contains BMC firmware updates for NS9500 and NS7x50 Sensors. For further assistance, contact Trellix support.

Update Gateway Anti-Malware (GAM) engine to version 2023

You need to update the Gateway Anti-Malware (GAM) engine running on NS-series Sensors to version 2023 to detect malware files in air-gap network environments. Perform the steps listed below to manually download the Gateway Anti-Malware Engine update file (.upd) and deploy it to your Sensors:

Heterogeneous support

This version of 11.1 Manager software can be used to configure and manage the following devices:

Note

For this release of 11.1, a heterogeneous environment with Virtual IPS Sensors for AWS and Azure is not supported.

Integration support

The above-mentioned Trellix IPS software versions support integration with the following product versions:

Note

After upgrading the Manager to 11.1.19.11, download the latest ePO extension and import it into the ePO user interface to avoid connectivity issues.