Trend Vision One Endpoint Security agent November 2025 update - Windows

Agent now supports the UK region

Agent supports deployment scripts for Sovereign and Private Cloud (SPC) deployments

Installer supports early check

Agent now supports Windows 11 25H2

Server & Workload Protection: User-based firewall is officially released and will be gradually deployed to customers

Vulnerability Assessment: Enhances data collection

Standard Endpoint Protection: Updates the Virus Scan Engine (VSAPI) and Advanced Threat Scan Engine (ATSE) to version 25.580.1003 to enhance memory and file scans

Standard Endpoint Protection: Updates the Network Content Inspection Engine (NCIE) to version 3.7.1028 to enhance secure driver loading

Standard Endpoint Protection: Updates the server program to protect against a potential path traversal security issue

Standard Endpoint Protection: Updates the Curl module to version 8.16.0 to enhance product security

Standard Endpoint Protection: Updates the OpenSSL module to version 3.6.0 to enhance product security.

Standard Endpoint Protection: Updates the TmEyes module to version 8.55.1409 to enable Windows 11 25H2 support

Standard Endpoint Protection: Updates the Behavior Monitoring Core Service module to version 2.98.2141 to enhance system performance

Standard Endpoint Protection: Updates the Behavior Monitoring Core Drive module to version 2.98.2131 to enhance system performance

Server & Workload Protection: Increases the file size limitation of the collection function from 128 MB to 4 GB in Agent Control Manager

Fixes an issue where Service communication manager (VOM) update fails because the service is restarted by watchdog during the update process

Standard Endpoint Protection: Resolved—When Web Reputation security level is set to "high," but the "Block pages that have not been tested by Trend Micro" option is not enabled, the system might incorrectly block untested domains

Standard Endpoint Protection: Resolved—Endpoint systems might encounter issues related to DLL corruption (TmUmEvt64.dll)

Standard Endpoint Protection: Resolved—System might display garbled content for Web Browser Extension on endpoints running on non-English versions of supported operating systems

Standard Endpoint Protection: Resolved—Agent might block URLs or websites that are not under monitoring

Server & Workload Protection: Fixes a timing issue where ICRC connection events might not be sent to Trend Micro services

Server & Workload Protection: Fixes an issue where enabling an HTTP/2 feature caused an infinite loop crash