The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Release information

  • Published on Oct 1, 2026
  • 3 minute(s) read
Prev Next

This release of Trellix IPS is to provide new features and enhancements on the Manager and NS-series Sensor software.

Release parameters

Version

IPS Manager software

11.1.7.56

Signature Set

11.10.10.5

NS-series Sensor software (NS9300, NS9200, NS9100, NS7500, NS7300, NS7200, NS7100, NS5200, NS5100, NS3500, NS3200, NS3100)

11.1.5.56

NS-series Sensor software (NS9500, NS7350, NS7250, NS7150)

11.1.5.57

Trellix SSL Agent (For inbound SSL decryption using DHE/ECDHE ciphers)

1.0.4

Suricata Snort Engine

3.2.3

Caution

The IPS Manager no longer supports HTTP-based connection and can be accessed via HTTPS connection only. You need to manually enter https://<hostname or host-IP> on the supported browsers to access the Manager UI.

Note

When you upgrade the Sensor software version to 11.1.5.56 or 11.1.5.57, you must also upgrade the corresponding Manager software version to 11.1.7.56.

For more information, see Manager and its compatible Sensor software versions in Trellix Intrusion Prevention System 11.1.x Product Guide.

Note

If you have a 9.x Manager managing 9.x NTBA, you should consider upgrading 9.x Manager to 10.1 or 11.1. If you plan to upgrade the Manager to 11.1, you need to first upgrade it to 10.1.7.65 and then to 11.1.

Upgrade support

Trellix regularly releases updated versions of the signature set. You can choose to automatically download and deploy the signature set in the Manager.

Upgrade paths for Manager software versions

Note

Before you start upgrading to the latest 11.1 Manager version, ensure that you do not change the timestamp and timezone values of the Manager.

Caution

  • The Manager software supports only TLS 1.2 ciphers for Manager and Sensor communication.

  • If you are currently using Sensor software version that supports TLS 1.0 and you upgrade your Manager software to 11.1.7.56, the communication between the Manager and Sensor will fail. Therefore, you must first upgrade the Sensor to a software version that supports TLS 1.2 and later upgrade your Manager to 11.1.7.56. Post this, you may upgrade the Sensor to 11.1.5.56 or 11.1.5.57. Please refer to KB96194 for more information and contact Trellix Support for assistance.

Windows based Manager:

Version

Upgrade path to 11.1

10.1.7.4, 10.1.7.7, 10.1.7.29, 10.1.7.35, 10.1.7.40, 10.1.7.44, 10.1.7.50, 10.1.7.50.2, 10.1.7.55, 10.1.7.61, 10.1.7.65, 10.1.7.66.3, 10.1.7.66.11

11.1.7.56

11.1.7.3, 11.1.7.3.5, 11.1.7.26, 11.1.7.41, 11.1.7.41.2

11.1.7.56

Linux based Manager:

Caution

After upgrade, the Linux-based Manager reboots automatically. If it fails to reboot, check the installation logs for errors and reboot the Manager manually.

Version

Upgrade path to 11.1

10.1.7.4, 10.1.7.7, 10.1.7.29, 10.1.7.35, 10.1.7.40, 10.1.7.44, 10.1.7.50, 10.1.7.50.2, 10.1.7.55, 10.1.7.61, 10.1.7.65, 10.1.7.66.3, 10.1.7.66.11

11.1.7.56

11.1.7.3, 11.1.7.3.5, 11.1.7.26, 11.1.7.41, 11.1.7.41.2

11.1.7.56

Note

For all direct upgrades to 11.1.7.56, use the IPSM_111756_setup.bin Version 11.1.7.56 upgrade file.

Upgrade paths for Sensor software versions

Caution

  • The Manager software supports only TLS 1.2 ciphers for Manager and Sensor communication.

  • If you are currently using Sensor software version that supports TLS 1.0 and you upgrade your Manager software to 11.1.7.56, the communication between the Manager and Sensor will fail. Therefore, you must first upgrade the Sensor to a software version that supports TLS 1.2 and later upgrade your Manager to 11.1.7.56. Post this, you may upgrade the Sensor to 11.1.5.56 or 11.1.5.57. Please refer to KB96194 for more information and contact Trellix Support for assistance.

Sensor models

Version

Upgrade path to 11.1

NS9500 (Standalone)

10.1.5.3, 10.1.5.5, 10.1.5.41, 10.1.5.64, 10.1.5.75, 10.1.5.92, 10.1.5.107, 10.1.5.116, 10.1.5.153, 10.1.5.170, 10.1.5.190, 10.1.5.204

11.1.5.57

11.1.5.2, 11.1.5.22, 11.1.5.44

11.1.5.57

NS9500 (Stack)

10.1.5.3, 10.1.5.5, 10.1.5.41, 10.1.5.64, 10.1.5.75, 10.1.5.92, 10.1.5.107, 10.1.5.116, 10.1.5.153, 10.1.5.170, 10.1.5.190, 10.1.5.204

11.1.5.57

11.1.5.2, 11.1.5.22, 11.1.5.44

11.1.5.57

NS-series (NS9300, NS9200, NS9100, NS7300, NS7200, NS7100, NS5200, NS5100, NS3200, NS3100)

10.1.5.3, 10.1.5.5, 10.1.5.41, 10.1.5.64, 10.1.5.75, 10.1.5.92, 10.1.5.106, 10.1.5.116, 10.1.5.153, 10.1.5.170, 10.1.5.190, 10.1.5.202

11.1.5.56

11.1.5.2, 11.1.5.22, 11.1.5.44

11.1.5.56

NS7500

10.1.5.64, 10.1.5.75, 10.1.5.92, 10.1.5.106, 10.1.5.116, 10.1.5.153, 10.1.5.170, 10.1.5.190, 10.1.5.202

11.1.5.56

11.1.5.2, 11.1.5.22, 11.1.5.44

11.1.5.56

NS7x50

10.1.5.3, 10.1.5.5, 10.1.5.41, 10.1.5.64, 10.1.5.75, 10.1.5.92, 10.1.5.107, 10.1.5.116, 10.1.5.153, 10.1.5.170, 10.1.5.190, 10.1.5.204

11.1.5.57

11.1.5.2, 11.1.5.22, 11.1.5.44

11.1.5.57

NS3500

10.1.5.3, 10.1.5.5, 10.1.5.41, 10.1.5.64, 10.1.5.75, 10.1.5.92, 10.1.5.106, 10.1.5.116, 10.1.5.153, 10.1.5.170, 10.1.5.190, 10.1.5.202

11.1.5.56

11.1.5.2, 11.1.5.22, 11.1.5.44

11.1.5.56

Note

If the Sensor is running on 10.1.5.153 or a later version of 10.1 and you plan to downgrade it to 10.1.5.106 (for NS9300, NS9200, NS9100, NS7500, NS7300, NS7200, NS7100, NS5200, NS5100, NS3500, NS3200, NS3100) or 10.1.5.107 (for NS9500, NS7350, NS7250, NS7150) or any older version, you need to first downgrade the Sensor to 10.1.5.116 and then downgrade it to the targeted version. Please refer to KB96194 and contact Trellix Support for further assistance.

Heterogeneous support

This version of 11.1 Manager software can be used to configure and manage the following devices:

Device

Version

NS-series Sensors (NS3100, NS3200, NS3500, NS5100, NS5200, NS7100, NS7200, NS7300, NS7150, NS7250, NS7350, NS7500, NS9100, NS9200, NS9300, NS9500 standalone and stack)

10.1, 11.1

Virtual IPS for AWS, Azure, and OCI (IPS-VM600)

10.1, 11.1

Virtual IPS for KVM and ESXi server (IPS-VM600 and IPS-VM5000)

Note

IPS-VM5000 and support for KVM have been introduced with 11.1 Update 2 release.

10.1, 11.1

NTBA Appliances (T-600, T-1200)

9.1

Virtual NTBA Appliances (T-VM, T-100VM, T-200VM)

9.1

Integration support

Trellix IPS version 11.1 supports integration with the following product versions:

Product

Version supported

Trellix Data Exchange Layer

6.0.3

Trellix Detection as a Service

2023.03.01

Trellix Endpoint Security

10.7.0

Trellix ePolicy Orchestrator - On-prem

5.10.0 Service Pack 1

Trellix Global Threat Intelligence

Compatible with all versions

Trellix Intelligent Sandbox

5.2.2, 5.2

Virtual Trellix Intelligent Sandbox

5.2.2, 5.2

Trellix Investigation Analysis (Appliance and Virtual)

2.2.0

Trellix Logon Collector

3.0.11

Trellix Threat Intelligence Exchange

4.0.0

Trellix Virtual Execution

9.1.3

McAfee Endpoint Intelligence Agent

3.2.4

Copyright © 2026 Musarubra US LLC | Privacy | Legal | AI Disclaimer