Windows/Linux/Mac container support with Trellix products

Technical Articles ID: KB90041
Last Modified: 2023-03-15 15:04:42 Etc/GMT

Environment

Trellix products

Windows, Linux, and Mac containers
Docker for Windows
Docker for Linux
Docker for Mac

Summary

The following products are supported on the host that is hosting the containers. These products don’t restrict containers from being initiated and don’t impede container functionality on the host. But, these products are currently not supported inside containers. So, these products don’t support being installed inside containers, don’t secure containers, and don’t provide container visibility:

Application and Change Control 6.1.7 and later (Linux) - For instructions to install Application and Change Control on a Docker host, see: KB90073 - How to install Application and Change Control on a Docker host system (Linux only).
Endpoint Security 10.7.0 June 2021 Update and later (Windows) - Supports all supported desktop and server platforms.

Endpoint Security 10.6.1 November 2020 Update and later, and Endpoint Security 10.7.0 November 2020 Update-10.7.0 April 2021 Update, supports only Windows Server 2016 and later and Windows 10 version 1809 (October 2018 Update) and later.

NOTE: The default ENS Firewall rules block DNS name resolution and most network traffic from WSL2 and Docker instances. For instructions to create firewall rules to allow the traffic from WSL2 and Docker instances, see: KB94601 - Endpoint Security Firewall blocks certain network traffic from WSL2/Docker instances.
Endpoint Security for Linux Firewall 10.6.0 and later (Linux)
Endpoint Security for Linux Threat Prevention 10.6.0 and later (Linux)

The following products are currently not supported either on the host that is hosting the containers, or inside containers. Trellix is investigating these products to make them compatible with containers in the future:

Application and Change Control (Windows)
Endpoint Security 10.x (Mac)
Trellix Endpoint Detection and Response

To submit a new product idea, go to the Enterprise Customer Product Ideas page.

Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website.

For more information about product ideas, see KB60021 - How to submit a Product Idea.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

Workaround

An on-demand scan (ODS) of Docker containers can take a long time to complete. It’s recommended to exclude the Docker container from ODS. The default location is: %ProgramData%\docker.

Reference: Docker article on antivirus software and Docker

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Windows/Linux/Mac container support with Trellix products

Environment

Summary

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Windows/Linux/Mac container support with Trellix products

Environment

Summary

Workaround

Affected Products

Languages:

Choose your region

Title

Title