This Managed Defense Portal release removes features related to the management of Trellix technologies. These changes are part of our ongoing efforts to streamline the portal experience.
Feature removals and alternatives
Details on the specific features removed and recommended alternatives are provided, as follows:
Health - Trellix Endpoints
- Removed: The graph showing the last 30 days of Trellix endpoints under Health > Trellix Endpoints has been removed.
- Alternative: For detailed information about the endpoint population, Mandiant recommends installing the Trellix Host Management module.
Dashboard - Trellix Endpoint Visibility
- Removed: The main dashboard no longer shows the count of Trellix endpoints under the Visibility section
- Alternative: For endpoint visibility metrics, refer to your Trellix console.
Scheduled Reports
- Removed: The following reports are no longer available as scheduled reports:
- Trellix Endpoint Security Report
- Network Coverage
- Trellix Endpoint Security Inactive Endpoints
- Alternative: Customers can generate similar reports using their Trellix reporting tools.
Trellix Endpoint Management
- Removed: The Endpoint Management page for managing host sets is no longer available.
- Alternative: Dynamic host sets can be used to simplify the management of containment allow lists. For the management of large, static host sets, Mandiant recommends using the Trellix Hostset Utility.
Contain Endpoint from Investigation
- Removed: Portal users no longer see a Contain button in investigation reports that include Trellix endpoints.
- Reason: This feature did not use customer approval workflows.
- Alternatives:
- Mandiant recommends containing an endpoint directly from the Trellix HX console.
- You can also request the Managed Defense SOC to contain an endpoint by posting a comment to the investigation and selecting the Request Response feature.
If you have any questions, please reach out to your Managed Defense Consultant (MDC).