Skip to main content

Trellix Security

Introduction​

As IoT adoption grows, more devices are connected across operational environments, making cybersecurity a critical requirement. Advantech provides Trellix-based security solutions for embedded systems to improve device protection, support compliance goals, and reduce security-related maintenance risks.

Solution Portfolio​

Advantech provides two complementary Trellix approaches:

  • Trellix Embedded Security (Whitelisting)
  • Trellix Endpoint Protection for OEM (Blacklisting)

Trellix Embedded Security (Whitelisting)​

This is the primary approach for fixed-purpose embedded devices and is suitable for most embedded scenarios.

Why Whitelisting​

  • Blocks execution of unauthorized applications to prevent zero-day and APT attacks
  • Uses application and change control to prevent unexpected system modifications
  • Helps reduce risks that may lead to downtime, emergency onsite service, or high support costs
  • Delivers strong protection with very low system overhead (low CPU and memory impact)

Core Capabilities​

Application Control​

  • Prevent zero-day attacks
  • Block any unauthorized application execution
  • Automatically trust and accept software added through authorized processes

Change Control​

  • Define access permissions for protected data by user or application
  • Prevent unplanned changes that can cause service interruption

ePolicy Orchestrator (ePO)​

  • Centralized policy management
  • Fast remote deployment and configuration
  • Reporting and analytics
  • Compliance support
  • Monitoring of managed endpoint data

Customer Benefits​

  • Minimal endpoint footprint
  • Zero-impact scanning model
  • Intelligent trust mechanism
  • Significantly reduced pattern/signature update burden

Trellix Whitelisting Manager​

To simplify deployment and day-to-day operations, Advantech also provides a management utility for Trellix whitelisting workflows.

Main Purpose​

  1. Users can manage Trellix Solidifier through Trellix Whitelisting Manager without command-line operations.
  2. For users adopting DeviceOn, the tool helps enable management workflows for the complete version of Trellix Solidifier.

Trellix Whitelisting Manager

Trellix Endpoint Protection for OEM (Blacklisting)​

For organizations that need broader endpoint security modules with flexible policy combinations, Advantech also provides Trellix Endpoint Protection for OEM.

Overview​

Trellix Endpoint Security 10 for OEM combines integrated protection, performance, and operational simplicity. It brings together firewall protection, threat prevention, and web control in a modular architecture where components can collaborate for better detection and response.

Core Modules​

  • Threat Prevention Module: Advanced malware scanning and protection against emerging targeted attacks
  • Web Control Module: Prevents access to malicious or unauthorized websites
  • Firewall Module: Blocks malicious inbound and outbound network traffic

Value for Customers​

  • Stronger endpoint defense for connected devices
  • Lower long-term security operation burden
  • Flexible module selection based on system type and deployment environment