03/18/2024

DATA SHEET

Trellix Endpoint Security Agent (HX) Software Support

The most recent Endpoint Security (HX) Agent software is version 36.21.0 (Linux), 36.20.0 (macOS) for use with Server version 5.3.3 or greater. Tables
1,2 & 3 list supported agents for Windows, macOS, and Linux operating systems. Unless otherwise shown, all editions of these operating systems are
supported. See page 6 for support exceptions. Tables 4 & 5 lists describe supported features. Tables 6, 7, and 8 provide specifications for each
operating system using the Endpoint Security Agent.

Table 1. Endpoint (HX) Agent Supported Versions on Microsoft Windows

AGENT VERSION 35.31.22-28 35.31.0-12 30.19
MINIMUM ENDPOINT SECURITY
5.3 5.3 4.8
VERSION
XP SP2 (32-bit) X X X
XP SP31 (32-bit) X X ✓E*
Vista SP1, SP2
X X ✓E*
(32-bit and 64-bit)
Win 7, SP1
✓ ✓ X
(32-bit and 64-bit)
Win 8
✓ ✓ X
(32 -bit and 64-bit)
Win 8.1, Update 1
✓ ✓ X
(32 -bit and 64-bit)
Win 10 1511,
X X X
(32 -bit and 64-bit)
Windows Versions

Win 10, 1607, 1703, 1709,

✓ ✓ X
LTSB (32 -bit and 64-bit)
Win 10 1803, 1809, 1903,
✓ ✓ X
(32-bit and 64-bit)
Win 10 19H2
✓ ✓ X
(32-bit and 64-bit)
Win 10 20H1
✓ ✓ X
(32-bit and 64-bit)
Win 10 20H2
✓ ✓ X
(32-bit and 64-bit)
Win 10 21H1
✓ ✓ X
(32-bit and 64-bit)
Win 10 21H2
✓ ✓ X
(32-bit and 64-bit)
Win 10 22H2
✓ P3 X
(32-bit and 64-bit)
 03/18/2024
Win 11 (21H2)
✓ ✓ X
(64-bit)
Win 11 (22H2)
✓ P3 X
(64-bit)
Win11 (23H2)
P3 P3 X
(64-bit)
Server 2003 R1 SP2
X X ✓E*
(32-bit and 64-bit)
Server 2003 R2 SP2
X X ✓E*
(32-bit and 64-bit)
Server 2008 Standard,
X X ✓E*
(32 bit and 64-bit)
Server 2008 R2,
✓ ✓ X
(32 bit and 64-bit)
Server 2012 (32-bit and ✓
64-bit) ✓ X
Server 2012 R2 (64-bit)
Server 2016 (64-bit) ✓ ✓ X
Server 2019 (64-bit) ✓ ✓ X
Server 2022 (64-bit) P2 P2 X
P1: Memory-related audits, CIMFS, Bypass IO in Driver & Azure File Sync are not supported.
P2: CIMFS, Bypass IO in Driver & Azure File Sync are not supported.
P3: Memory audits not supported.
✓E*: Extended support can be purchased for this agent version and OS version.
Windows Embedded Enterprise and IoT Enterprise versions are supported with the equivalent version of Windows desktop version.
Memory-related audits are not supported for host endpoints running 32-bit Win10 hosts.

Table 2. Endpoint (HX) Agent Supported Versions on Apple macOS

AGENT VERSION 36.20.0 35.31.22-25 35.31.0-12
MINIMUM ENDPOINT SECURITY VERSION 5.3.3 5.3 5.3
11 Big Sur:11.0 - 11.6 (64-bit) ✓* ✓ ✓
12 Monterey 12.0 - 12.6 (64-bit, M1- M3) ✓ ✓ ✓
13 Ventura 13.0 - 13.1 (64-bit, M1- M3) ✓ ✓ P1
13 Ventura 13.2 - 13.6 (64-bit, M1 - M3) ✓ X X
14 Sonoma 14.0 - 14.4 (64-bit, M1 - M3) ✓ X X
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, macOS, or Linux operating system version listed.
✓*: Provides support for M1/M2 ARM via Rosetta.
P1: The Quarantine Events audit does not report downloads in macOS 13. Persistence Audit Does not Show Services in macOS 13.

Table 3. Endpoint (HX) Agent Supported Versions on Linux.

AGENT VERSION 36.21.0 35.31.0-25

MINIMUM ENDPOINT SECURITY (HX) VERSION 5.3.3 5.3
AlmaLinux 8.9 ✓ X
AlmaLinux 9.3 ✓ X
Amazon Linux AMI 2018.3 (64-bit) ✓ ✓
Amazon Linux 2 (64-bit) ✓ ✓
CENTOS 6.10 (64-bit) X ✓
CENTOS 7.2 - 7.7 (64-bit) P1 ✓
 03/18/2024
CENTOS 7.8, 7.9 (64-bit) ✓ ✓
CENTOS 8.0 (64-bit) ✓ ✓
CENTOS 8.4 (64-bit) ✓ ✓
CENTOS 8.1 – 8.5 (64-bit) ✓ ✓
OpenSUSE Leap 15.1 (64-bit) ✓ ✓
OpenSUSE Leap 15.2 (64-bit) ✓ ✓
OpenSUSE Leap 15.3 (64-bit) ✓ ✓
OpenSUSE Leap 15.4 (64-bit) ✓ X
Oracle 6.10 (UEK & RHCK) (64-bit) X ✓
Oracle 7.7 – 7.8 (UEK) (x86_64) P2 ✓
Oracle 7.9 (UEK) (64-bit) P2 ✓
Oracle 8.0, (RHCK) (64-bit) ✓ ✓
Oracle 8.1, 8.2 (UEK & RHCK) (64-bit) 1 ✓ ✓
Oracle 8.3 - 8.4 (UEK) (64-bit) ✓ ✓
Oracle 8.5 – 8.6 (UEK) (64-bit) ✓ ✓
Oracle 8.7 – 8.9 (UEK) (64-bit) ✓ X
Oracle 9.0 – 9.3 (UEK) (64-bit) ✓ X
RHEL 6.10 (64-bit) X ✓
RHEL 7.2 - 7.7 (64-bit) ✓ ✓
RHEL 7.8, 7.9 (64-bit) ✓ ✓
RHEL 8.0 (64-bit) ✓ ✓
RHEL 8.1, 8.2, 8.3 (64-bit) ✓ ✓
RHEL 8.4, 8.5 (64-bit) ✓ ✓
RHEL 8.6 (64-bit) ✓ ✓
RHEL 8.7 - 8.9 (64-bit) ✓ X
RHEL 9.0 – 9.3 (64-bit) ✓ X
Rocky Linux 8.4 – 8.6 (64-bit) ✓ ✓
Rocky Linux 8.7 – 8.9 (64-bit) ✓ X
Rocky Linux 9.0 – 9.3 (64-bit) ✓ X
SUSE Enterprise Linux Server 12 SP4-SP5 (64-bit) ✓ ✓
SUSE Enterprise Linux Server 15 GA (64-bit) ✓ ✓
SUSE Enterprise Linux Server 15 SP1-SP3 (64-bit) ✓ ✓
SUSE Enterprise Linux Server 15 SP4-SP5(64-bit) ✓ X
Ubuntu 14.04, 16.04 (64-bit) X ✓
Ubuntu 18.04 (64-bit) ✓ ✓
Ubuntu 19.04 (64-bit) ✓ ✓
Ubuntu 20.04 LTS (64-bit) ✓ ✓
Ubuntu 22.04 LTS (64-bit) ✓ ✓
All Linux OS are supported on x86-64 architecture only.
✓: Provides full support for the FireEye Endpoint Security Agent software features available in a target release, except for features listed in “FireEye Endpoint Security Agent Feature Support Exceptions” on page 8.
X: The Endpoint Security Agent software version is not available (not supported) for the Windows, macOS, or Linux operating system version listed.
1: RHCK kernel supported on 8.0, 8.1 and 8.2 only. UEK kernel supported on 8.2 and up.
P1: Supported on kernels 3.10.0-1062 or later.
P2: Supported on UEK kernels 5.4.17-2011 or later.
 03/18/2024
Table 4. Endpoint (HX) Agent Feature Support
Feature Audit Real Time IOC ExploitGuard Malware Protection MalwareGuard IA Modules
Windows (All Versions) TBA TBA TBA TBA TBA TBA
Agent X X
macOS (All Versions) ✓ ✓ ✓ ✓
36 X X
Linux (All Versions) ✓ ✓ ✓ ✓
Windows (All Versions) ✓ ✓ ✓ ✓ ✓ ✓
Agent
macOS (All Versions) ✓ ✓ X ✓ X ✓
35
Linux (All Versions) ✓ ✓ X ✓ X ✓
Some Endpoint (HX) Security features require specific versions of Endpoint (HX) Security Agent software. See the Trellix Endpoint Security (HX) Server User Guide and the Trellix Endpoint (HX) Security Agent Administration Guide for more details.
Memory-related audits are not supported for host endpoints running 32-bit Win10 hosts.

Table 5. Browser Audit Support.

AGENT VERSION 36.20.0 (mac) 35.31.22-25 35.31.0-12
CURRENT BROWSER SUPPORT AS OF DATE 1 11/2022 11/2022 11/2022
Chrome X ✓ ✓
Firefox X ✓ ✓
Windows

Firefox ESR X ✓ X
Edge X ✓ ✓
Internet Explorer X ✓ ✓
Brave X ✓ X
Chrome ✓ ✓ ✓
Firefox ✓ ✓ ✓
macOS

Firefox ESR ✓ ✓ ✓
Edge ✓ ✓ ✓
Safari ✓ ✓ ✓
Brave ✓ ✓ X
Chrome X X X
Linux

Firefox X X X
Edge X X X
Brave X X X
1 Current stable production versions of supported browsers have been verified with the respective agent as of the end of the month indicated.
 03/18/2024
Trellix Endpoint (HX) Security System Requirements
Trellix Endpoint Security (HX) Agent recommended usage is on a 4th generation (Haswell) Intel or comparable processor. The agent can be installed on any built-in hard drive with
minimum available storage of 1 GB. For best performance a solid-state storage system is preferred for disk I/O intensive operations such as exhaustive enterprise searches.

Table 8. Requirements for Windows operating systems.

WINDOWS OPERATING SYSTEM MINIMUM SYSTEM MEMORY (RAM)
VERSIONS
XP SP3 (32-bit) 1 GB
Server 2003 R1 SP2 (32-bit, 64-bit)
Server 2003 R2 SP2 (32-bit, 64-bit)
All other versions 2 GB

Table 9. Requirements for macOS.

MAC OS VERSIONS MINIMUM SYSTEM MEMORY (RAM)
All versions 2 GB

Table 10. Requirements for Linux operating systems.

LINUX OPERATING SYSTEM VERSIONS MINIMUM SYSTEM MEMORY (RAM)
All Versions 2 GB
 03/18/2024
To learn more about Trellix, visit: www.trellix.com

Trellix, Inc. About Trellix, Inc.

408.321.6300/877.347.3393 Living Security for XDR.
www.trellix.com Always Learning. Always Adapting.

Copyright © 2022 Musarubra US LLC

Trellix is the trademark or registered trademark of Musarubra US LLC and affiliates in
the US and /or other countries. Other names and brands are the property of these
companies or may be claimed as the property of others.