Selecting a Trellix NDR software license Published on Sep 15, 2026 Focus Listen
Print
Copy page Copy as Markdown for LLMs View as Markdown View the page as plain text
Open in ChatGPT Ask ChatGPT about this page Open in Claude Ask Claude about this page Prev Next Trellix NDR is available in three software licenses: Essentials, Core, and Enterprise. Each license includes a defined set of capabilities.
Software license comparison
License
Includes
Capabilities
Essentials
NX and PX license (carryover)
NDR Feature license for NX
NDR Sensor license (5 virtual)
NDR Console license (1 virtual)
Central Manager (2 virtual CMS)
Core
NX and PX license (carryover)
NDR Feature license for NX
NDR Sensor license (5 virtual)
NDR Console license (1 virtual)
Central Manager (2 virtual CMS)
All Essentials capabilities, plus:
Machine learning and AI anomaly detections and correlations
Asset discovery and integrations
Hyperautomation for NDR (For Trellix products Response Actions)
Forensics — Packet capture (Event-based and selective)
Enterprise
NX and PX license (carryover)
NDR Feature license for NX
NDR Sensor license (10 virtual)
NDR Console license (1 virtual)
Central Manager (2 virtual CMS)
All Essentials and Core capabilities, plus:
Attack Path Discovery (APD)
Hyperautomation for NDR (Full SOAR)
Retroactive analysis using Deep Packet Inspection (DPI)
IVX (API submission)
Full Forensics
For more details, see Overview of license types and features in Trellix Network Detection and Response console (0000015667) .
Was this article helpful?