The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Release information

Prev Next

This release of Trellix vIPS is to provide new features and enhancements on the Manager and Virtual IPS Sensor software.

Note

This release is for ESXi environment only.

Release parameters Version
IPS Manager software 10.1.7.65
Signature Set 10.9.37.7
Virtual IPS Sensor software (ESXi) 10.1.7.155
Trellix SSL Agent (For inbound SSL decryption using DHE/ECDHE ciphers) 1.0.4

Note

The Signature Set version 10.9.37.7 bundled with this release of Manager contains only Digital Envoy database for IP address to Geolocation Mapping. This signature set version will not be a part of the publicly available signature sets.

Note

The Manager software 10.1 is not supported on Windows-based Appliance. The end-of-life for Windows-based Appliance has been declared and the end-of-life is on 1-Apr, 2023. Trellix recommends you to migrate from Windows-based Appliance to Linux-based Appliance.

Upgrade support

Upgrade paths for Manager software versions

Note

Before you start upgrading to the latest 10.1 Manager version, ensure that you do not change the timestamp and timezone values of the Manager.

Caution

Starting with release 10.1.7.50, the Manager software version supports only TLS 1.2 ciphers for Manager and Sensor communication.

Caution

If you are currently using Sensor software version that supports TLS 1.0 and you upgrade your Manager software to 10.1.7.50 or later, the communication between the Manager and Sensor will fail. Therefore, you must first upgrade the Sensor to a software version that supports TLS 1.2 and then, upgrade your Manager to 10.1.7.50 or later versions. Post this, you can upgrade the Sensor to 10.1.7.96 or later versions.

For example, if you have a Virtual IPS Sensor running on 9.2.7.10 (TLS 1.0) and Manager on 10.1.7.44, and you plan to upgrade the Sensor to 10.1.7.155 and Manager to 10.1.7.65, you must follow the upgrade path as listed below:

  1. Upgrade your Virtual IPS Sensor from 9.2.7.10 (Supports TLS 1.0) to 10.1.7.86 (Supports TLS 1.2).
  2. Upgrade the Manager from 10.1.7.44 to 10.1.7.65
  3. Upgrade the Sensor from 10.1.7.86 to 10.1.7.155

Windows-based Manager:

Version Upgrade path to 10.1
9.1.7.11, 9.1.7.15, 9.1.7.49, 9.1.7.63, 9.1.7.73, 9.1.7.75, 9.1.7.77, 9.1.7.80, 9.1.7.83 10.1.7.65
9.2.7.9, 9.2.7.22, 9.2.7.31, 9.2.9.5, 9.2.9.12, 9.2.9.53, 9.2.9.55, 9.2.9.60 10.1.7.65
10.1.7.4, 10.1.7.7, 10.1.7.29, 10.1.7.35, 10.1.7.40, 10.1.7.44, 10.1.7.50, 10.1.7.50.2, 10.1.7.55, 10.1.7.61 10.1.7.65

Linux-based Manager:

Note

After upgrade, the Linux-based Manager reboots automatically. If it fails to reboot, check the installation logs for errors and reboot the Manager manually.

Version Upgrade path to 10.1
9.1.7.49, 9.1.7.63, 9.1.7.73, 9.1.7.75, 9.1.7.77

Note

To upgrade to Manager version 9.1.7.77.11, use NSM_9177711_setup.bin.unsigned Version 9.1.7.77.11 upgrade file.

9.1.7.77.11 | 10.1.7.65
9.1.7.80, 9.1.7.83 10.1.7.65
9.2.7.31, 9.2.9.8, 9.2.9.12, 9.2.9.53, 9.2.9.55, 9.2.9.60 10.1.7.65
10.1.7.4, 10.1.7.7, 10.1.7.25 (Cloud), 10.1.7.29, 10.1.7.35, 10.1.7.40, 10.1.7.44, 10.1.7.50, 10.1.7.50.2, 10.1.7.55, 10.1.7.61 10.1.7.65

Note

For all direct upgrades to 10.1.7.65, use the IPSM_101765_setup.bin Version 10.1.7.65 upgrade file.

Upgrade paths for Sensor software versions

Virtual IPS Sensor software ESXi (IPS-VM600):

Caution

Starting with release 10.1.7.50, the Manager software version supports only TLS 1.2 ciphers for Manager and Sensor communication.

Caution

If you are currently using Sensor software version that supports TLS 1.0 and you upgrade your Manager software to 10.1.7.50 or later, the communication between the Manager and Sensor will fail. Therefore, you must first upgrade the Sensor to a software version that supports TLS 1.2 and then, upgrade your Manager to 10.1.7.50 or later versions. Post this, you can upgrade the Sensor to 10.1.7.96 or later versions.

For example, if you have a Virtual IPS Sensor running on 9.2.7.10 (TLS 1.0) and Manager on 10.1.7.44, and you plan to upgrade the Sensor to 10.1.7.155 and Manager to 10.1.7.65, you must follow the upgrade path as listed below:

  1. Upgrade your Virtual IPS Sensor from 9.2.7.10 (Supports TLS 1.0) to 10.1.7.86 (Supports TLS 1.2).
  2. Upgrade the Manager from 10.1.7.44 to 10.1.7.65
  3. Upgrade the Sensor from 10.1.7.86 to 10.1.7.155
Sensor models Version TLS support Upgrade path to 10.1
Virtual IPS Sensor software ESXi (IPS-VM600) 9.1.7.13, 9.1.7.18, 9.1.7.22, 9.1.7.25, 9.1.7.27 TLS 1.2 10.1.7.155
9.2.7.10, 9.2.7.26 TLS 1.0 10.1.7.86 | 10.1.7.155
9.2.7.20, 9.2.7.54, 9.2.7.56, 9.2.7.65 TLS 1.2 10.1.7.155
10.1.7.1, 10.1.7.42, 10.1.7.51, 10.1.7.65, 10.1.7.86, 10.1.7.96 , 10.1.7.123, 10.1.7.135 TLS 1.2 10.1.7.155

Note

If the Sensor is running on 10.1.7.123 or a later version of 10.1 and you plan to downgrade it to 10.1.7.86 or an older version, you need to first downgrade the Sensor to 10.1.7.96 and then, downgrade it to the targeted version.

Important

  • When you are downloading the Sensor software in the Manager, ensure that the Manager software release is equal to or higher than the Sensor software release. For example: If you are using 10.1.7.55 (10.1 Update 8) Manager, the Sensor software must be 10.1.7.123 (10.1 Update 8) or any lower version. You must not download the Sensor software 10.1.7.135 (10.1 Update 9) or higher version using the 10.1.7.55 (10.1 Update 8) Manager.
  • If you have already downloaded a higher release of Sensor software in an older Manager release, the Manager is in a bad state. To recover the Manager, manually delete the Sensor software files.

Heterogeneous support

This version of 10.1 Manager software can be used to configure and manage the following devices:

Note

For this release of 10.1, heterogeneous environment with Virtual IPS Sensors for AWS, Azure, and OCI are not supported.

Device Version
NS-series Sensors (NS3100, NS3200, NS5100, NS5200, NS7150, NS7250, NS7350, NS7100, NS7200, NS7300, NS9100, NS9200, NS9300) 9.1, 9.2, 10.1
NS-series Sensors (NS3500, NS9500 standalone and stack) 9.2, 10.1
NS-series Sensors (NS7500) 10.1
Virtual IPS for ESXi server (IPS-VM600) 9.1, 9.2, 10.1
M-series Sensors (M-1250, M-1450, M-2850, M-2950, M-3030, M-3050, M-4030, M-4050, M-6030, M-6050, M-8000, M-8030) 9.1
M-8000XC Cluster Appliance 9.1
NTBA Appliances (T-600, T-1200) 9.1
Virtual NTBA Appliances (T-VM, T-100VM, T-200VM) 9.1

Integration support

Trellix IPS version 10.1 supports integration with the following product versions:

Note

Starting with 10.1, integration with McAfee Host Intrusion Prevention is longer supported.

Product Version supported
McAfee ePO™ 5.10.0 Update 13
Trellix Endpoint Security (formerly, McAfee Endpoint Security) 10.7.0
Trellix Global Threat Intelligence™ (formerly, McAfee Global Threat Intelligence) Compatible with all versions
McAfee Endpoint Intelligence Agent 3.2.4
McAfee Logon Collector 3.0.10
Trellix Threat Intelligence Exchange (formerly, McAfee Threat Intelligence Exchange) 3.0.1
Trellix Data Exchange Layer (formerly, McAfee Data Exchange Layer) 6.0.3
Trellix Intelligent Sandbox (formerly, McAfee Advanced Threat Defense) 5.0, 4.14.2
Virtual Trellix Intelligent Sandbox (formerly, McAfee Virtual Advanced Threat Defense) 5.0, 4.14.2
McAfee Vulnerability Manager 7.5.14
Trellix Virtual Execution 9.1.2 and above