Trend Vision One Endpoint Security agent December 2025 update - Linux

Agent supports Ubuntu 24 ARM64 (AWS Arm-based Graviton 2) deployments

Updates CACert

Server & Workload Protection - Firewall and Intrusion Prevention system events now display process and user info if the data is available. This enhancement is being rolled out gradually and might not follow the normal release schedule.

Server & Workload Protection - Strong cipher and minimum Transport Layer Security (TLS) version can be set in the agent configuration file for agents using Deep Security Relay

Server & Workload Protection - Updates the Advanced Threat Scan Engine to version 25.560

Server & Workload Protection - Resolved issue: agent was unable to start on some Red Hat Package Manager (RPM)-based Linux distributions using a newer RPM library (rpm-4.16.1.3-39.el9.x86_64 or later / rpm-4.19.1.1-20.el10.x86_64 or later)

For more information, see the Success Portal Knowledge Base.

Server & Workload Protection - Resolved issue: uploading logs using the File Collection or Custom Script functions failed on some systems

Server & Workload Protection - Resolved issue: while Application Control was running in lockdown mode, applications could execute if Application Control was processing a ruleset change

Server & Workload Protection - Resolved issue: Application Control blocked some applications from being executed through a shell when they should have been allowed