Trellix Advanced Endpoint Security with Forensics Software - 1 Year Subscription + Support - 1 User

Unified Trellix EDR with Forensics combines Trellix Endpoint Security HX and Trellix EDR traces, offering comprehensive detection, investigation, forensics, and response for Windows, macOS To find threats for which a signature does not yet exist, Endpoint Forensics uses machine learning built off knowledge from thousands of incident response engagements. For attacks on exploits in common software and browsers, a behavioral analysis engine determines if an exploit is being used and stops it from executing. In addition, Trellix continuously develops methods to defend against attack techniques and accelerate responses to emerging threats. For example, we developed a mechanism to see and stop credential exfiltration. Trellix Endpoint Forensics provides a modular architecture that unifies multiple engines and downloadable modules to protect, detect, investigate, and respond to threats, and collect salient forensics data to accurately scope an incident.

Even with the best protection, breaches are inevitable. To ensure a substantive response that minimizes business disruption, Endpoint Forensics includes Endpoint Detection and Response capabilities that rely on real-time indicators of compromise ( IoCs) developed with help from front-line responders. Trellix tools also:
• Search for and investigate known and unknown threats on tens of thousands of endpoints in minutes • Identify and detail the vectors an attack used to infiltrate an endpoint
• Determine whether an attack occurred (and persists) on a specific endpoint and scope the potential spread
• Establish timeline and duration of endpoint compromises and follow the incident

LICENSE: Per User
DELIVERABLE: Software as a Service (SaaS) with activation email and/or software download for on-premises deployment. IaaS in AWS for Trellix Endpoint Security (HX)
MANAGEMENT: ePO - SaaS, ePO - On-prem, ePO - IaaS, Endpoint Security (HX)- Cloud HX, Endpoint Security (HX) – vHX, Threat Intelligence Exchange (TIE), Threat Intelligence Exchange - SaaS and Data Exchange Layer (DXL).
FEATURES INCLUDED: Unified Trellix EDR with Forensics (EDRF) client combines Trellix Endpoint Security HX and Trellix EDR traces, offering comprehensive detection, investigation, forensics, and response for Windows, macOS, and Linux platforms for on-prem environments, Protection for Native Security, Endpoint Security for Windows, macOS, and Linux Platforms, Device Control, Command Line Scanner, Application Control for PCs, Trellix Insights for profiling "Top Attacks" with guidance to improve protection, and access to deploy Strategic Innovation Alliance (SIA) partner products. HX Controller deployment options include HW, HW DMZ, Virtual Appliance (VA), VA DMZ and Cloud. Up to 10 VA for HX included in the subscription cost but must be quoted separately. HW appliance and Cloud HX deployment SKUs need to be purchased separately. Quotes and Orders must additionally include the required number of deployment option physical/virtual appliances if required by customer - for corresponding appliance activation keys.
RESTRICTIONS: Limited to a maximum of 5 devices per User. ePO - SaaS does not support all product features. Refer to specific product documentation for the latest compatibility with ePO - SaaS. This entitlement includes ePO - SaaS Cloud tenancy located in United States data center only. EDR Cloud Capabilities are not part of the offering.