Trellix

Email Security Cloud

Cloud-native email security platform providing comprehensive protection for inbound and outbound email. Uses multi-layered detection including IVX sandboxing, PhishVision deep learning, Kraken ML engine, and Trellix Wise AI. Includes integrated DLP capabilities. FedRAMP Moderate certified.

Security Operations: Enterprise Security Manager

Traditional SIEM platform providing security information and event management. Version 11.6.x is the current active version.

Security Operations: Helix

XDR/SIEM/SOAR platform that unifies threat events across the security stack. Applies AI-driven analytics, alert triage, and no-code hyperautomation for investigation and response. Correlates data from Trellix and 500+ third-party tools.

Trellix Data Security: Data Encryption

Enterprise data encryption solution providing full-disk, file-level, and removable media protection with centralized key management.

Trellix Data Security: Data Loss Prevention

Comprehensive data loss prevention solution covering endpoint, network, email, web, and cloud application vectors. Discovers, classifies, and labels data across 400+ content types.

Trellix Data Security: Database Security

Database security solution providing virtual patching, vulnerability management, and activity monitoring for databases.

Trellix Endpoint Detection and Response: EDR

Standalone endpoint detection and response product. Collects and analyzes 70+ telemetry sources. Provides automated threat detection, MITRE ATT&CK mapping, and Trellix Wise AI-powered investigation.

Trellix Endpoint Detection and Response: EDR with Forensics

Enhanced EDR product with integrated forensics capabilities. Extends standard EDR with the ability to capture and store files, memory, processes, and full disk images for further analysis.

Trellix Network Detection and Response: Advanced Threat Detection Appliance (AX Series)

Hardware-based advanced threat detection sandbox appliance descended from FireEye AX series. The AX 5550 is the primary model observed in documents. Used for detonating and analyzing suspicious files, URLs, and objects in a multi-vector virtual execution (MVX) sandbox environment. Licensed with an annual base software subscription (PTM license) and a Dynamic Threat Intelligence (DTI) cloud subscription.

Trellix Network Detection and Response: Network Detection and Response

Network security product providing detection and response for network-based threats. Uses the Multi-Vector Virtual Execution (MVX) engine, machine learning, and AI for signature-less dynamic analysis of suspicious traffic. Available as hardware appliances (NX series) and virtual/cloud deployments.

Trellix Threat Intelligence: Global Threat Intelligence

Comprehensive, real-time, cloud-based reputation service fully integrated into Trellix products. Provides file, URL, IP, and domain reputation data.

Trellix Threat Intelligence: Private GTI

Enterprise-deployed version of Global Threat Intelligence for organizations with strict data residency or air-gap requirements.

Trellix Threat Intelligence: Threat Intelligence Exchange

Real-time threat intelligence sharing platform that enables security components to instantly communicate about emerging and multi-phase advanced attacks. Included in Trellix Endpoint Security Core and Enterprise tiers.