Supported platforms for Cloud Workload Security

Technical Articles ID: KB90062
Last Modified: 2023-06-14 10:39:12 Etc/GMT

Environment

Cloud Workload Security (CWS) 5.3.x, 5.2.x, 5.1.0, 5.0.x

CWS components:

CWS for Amazon Web Services (AWS)
CWS for OpenStack Connector
CWS for Microsoft Azure
CWS for vSphere
CWS for Kubernetes Cluster
CWS for Citrix Hypervisor
CWS for Hyper-V

NOTE: CWS was formerly known as Cloud Workload Discovery (CWD).

Summary

Recent updates to this article

Date	Update
June 14, 2023	Minor formatting changes; no content changes.
March 23, 2023	Updated Release Notes link.
March 14, 2023	Added CWS 5.3.4 General Availability (GA) release details.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

Product summary
The main purpose of CWS is to discover and automatically import Virtual Machines (VMs) from Data Centers in Public Clouds and Private Clouds. Then, it displays them in the ePolicy Orchestrator (ePO) System Tree. An administrator can then deploy the Trellix Agent and other products to the VMs. The administrator can also view and query their virtualization properties, protection status, and security compliance, through several dashboards and queries.

Contents:
Click to expand the section you want to view:

Product release information

For CWS known issues, see KB90035 - Cloud Workload Security 5.x Known Issues.

CWS Connector Extensions	Package Build	Release Notes	Release Date	End of Life (EOL) Date
CWS 5.3.4 (GA)	5.3.4.3	Release Notes	March 14, 2023	-
CWS 5.3.3 (GA)	5.3.3.24	Release Notes	April 14, 2020
CWS 5.3.2 (GA)	5.3.2.301	Release Notes	October 8, 2019
CWS 5.3.1 Hotfix 1273403 (RTS)³ (HF1273403)	5.3.1.358	n/a⁴	May 29, 2019
CWS 5.3.1 Hotfix 1266324 (RTS)³ (HF1266324)	5.3.1.237	n/a⁴	May 29, 2019
CWS 5.3.1 Hotfix 1265809 Repost (GA) (1265809)	5.3.1.287	-	March 11, 2019
CWS 5.3.1 Hotfix 1266699 (RTS)³ (HF1266699)	n/a	n/a⁴	February 27, 2019
CWS 5.3.1 Hotfix 1265809 (GA) (HF1265809)	5.3.1.254	-	February 20, 2019
CWS 5.3.1 (GA)	n/a	R elease Notes	January 8, 2018
CWS 5.3.0 (GA)	n/a	R elease Notes	September 9, 2018

CWS 5.2.0 Hotfix 1239584 (GA) (HF1239584)	5.2.0.132	Release Notes	August 23, 2018	-
CWS 5.2.0 Hotfix 1239584 - (RTS)³ (HF1239584)	5.2.0.117	n/a⁴	July 23, 2018
CWS 5.2.0 (GA)	n/a	Release Notes	July 10, 2018

CWS 5.1.0 (GA)	n/a	-	May 8, 2018	February 15, 2021

CWS 5.0.1 (GA)¹	n/a	-	February 13, 2018	February 15, 2021
CWS 5.0 Hotfix 1224396 (GA)^{2, 1} (HF1224396)	n/a	-	January 9, 2018
CWS 5.0 (GA)¹	n/a	-	November 30, 2017

GA = General Availability
RTS = Released to Support
n/a = not available

¹	OpenStack is included in the CWD 4.x packages.
²	New feature-only release. With this release, it's now possible to shut down your AWS and Microsoft Azure workloads, as a remediation measure, from the CWS user interface.
³	We investigated this issue and a solution is currently available. This solution is currently not generally available, but is in Released to Support (RTS) status. To obtain the RTS build, log on to the ServicePortal and create a Service Request. Include this article number in the Problem Description field. See KB51560 - On-premises product release cycle for more information.
⁴	Hotfix release notes that are only released to support (RTS). This file is included in the package that's sent to the customer.

Extensions shipped with CWS

CWS 5.3.x Extensions

Extension	CWS 5.3.4 (GA)	CWS 5.3.3 (GA)	CWS 5.3.2 (GA)	CWS 5.3.1 HF1265809 (Repost) (GA)	CWS 5.3.1 HF1266699 (RTS)	CWS 5.3.1 HF1265809 (GA)	CWS 5.3.1 (GA)	CWS 5.3.0 (GA)
AWS Connector	5.3.4.2	5.3.3.1	5.3.2.275	5.3.1.102	-	5.3.1.102	5.3.1.102	5.3.0.112
vSphere Connector	5.4.0.149	5.3.3.1	5.3.2.111	5.3.1.226	5.3.1.212	5.3.1.206	5.3.1.103	5.3.0.104
Azure Connector	5.3.4.6	5.3.3.3	5.3.2.212	5.3.1.107	5.3.1.107	5.3.1.107	5.3.1.107	5.3.0.108
OpenStack Connector	5.3.4.2	5.3.3.2	5.3.2.240	5.3.1.103	5.3.1.103	5.3.1.103	5.3.1.103	5.3.0.101
Citrix Hypervisor Connector	5.3.4.4	5.3.3.3	5.3.2.31	5.3.1.208	5.3.1.200	5.3.1.200	5.3.1.56.1	-
Hyper-V Connector	5.3.4.3	5.3.3.2	5.3.2.30	5.3.1.211	5.3.1.201	5.3.1.201	5.3.1.41.1	-
Data Center Controller (DCC)¹	5.3.4.18	5.3.3.28	5.3.2.270	5.3.1.250	5.3.1.216	5.3.1.216	5.3.1.121	5.3.0.123
Data Center Metering	5.3.4.4	5.3.3.2	5.3.2.38	5.3.1.101	5.3.1.101	5.3.1.101	5.3.1.102	5.3.0.100
Data Center Visualization	5.3.4.4	5.3.3.2	5.3.2.279	5.3.1.265	5.3.1.225	5.3.1225	5.3.1.145	5.3.0.138
Data Center Assessment	5.3.4.3	5.3.3.2	5.3.2.203	5.3.1.109	5.3.1.109	5.3.1,109	5.3.1.109	5.3.0.117
CWS_LIC	5.3.4.4	5.3.3.2	5.3.2.27	5.3.1.100	5.3.1.100	5.3.1.100	5.3.1.100	5.3.0.100
Kubernetes Cluster²	5.3.4.3	5.3.3.2	5.3.2.93	5.3.1.112	5.3.1.112	5.3.1.112	5.3.1.112	5.3.0.104

¹	DCC is the base management extension for all CWS. When you check in the extension of a connector, it also automatically checks in the DCC extension. One CWS extension is shared among all connectors.
²	Kubernetes Cluster is supported with DC-Kubernetes_Ext_5.3.3.x on ePO 5.10 CU11 or later. The known issue is documented in KB90382 - ePolicy Orchestrator 5.10.x Known Issues.

CWS 5.2.x Extensions

Extension	CWS 5.2.0 HF1239584 (GA)	CWS 5.2.0 HF1239584 (RTS)	CWS 5.2.0 (GA)
AWS Connector	5.2.0.119	5.2.0.104	5.2.0.104
vSphere Connector	5.2.0.107	5.2.0.102	5.2.0.102
Azure Connector	5.2.0.107	5.2.0.106	5.2.0.106
OpenStack Connector	5.2.0.104	5.2.0.104	5.2.0.104
Data Protection for Cloud (DPC)	-	-	4.5.0.118.2
DCC¹	5.2.0.122	5.2.0.122	5.2.0.112
Data Center Metering	5.2.0.100	5.2.0.100	5.2.0.100
Data Center Visualization	5.2.0.141	5.2.0.141	5.2.0.117
Data Center Assessment	5.2.0.119	5.2.0.119	5.2.0.111
CWS_LIC	5.2.0.102	5.2.0.102	5.2.0.102
Kubernetes Cluster	5.2.0.103	5.2.0.103	5.2.0.103

¹	DCC is the base management extension for all CWS. When you check in the extension of a connector, it also automatically checks in the DCC extension. One CWS extension is shared among all connectors.

CWS 5.1.x and 5.0.x Extensions

Other Extensions	CWS 5.1.0 (GA)	CWS 5.0.1 (Update 1) (GA)	CWS 5.0 HF1224396 (GA)	CWS 5.0 (GA)
AWS Connector	5.1.0.170	5.0.1.109	5.0.0.165	5.0.0.159
vSphere Connector	5.1.0.120	5.0.1.145	5.0.0.145	5.0.0.145
Azure Connector	5.1.0.147	5.0.1.101	5.0.0.161	5.0.0.153
OpenStack Connector	5.1.0.147	-	-	-
DPC	4.5.0.118.2	4.5.0.118.2	4.5.0.118.2	4.5.0.118.2
DCC¹	5.1.0.241	5.0.1.111	5.0.0.200	5.0.0.193
Data Center Metering	5.1.0.102	4.0.0.153	4.0.0.153	4.0.0.153
Data Center Visualization	5.1.0.295	5.0.1.101	5.0.0.279	5.0.0.271
Data Center Assessment	5.1.0.167	5.0.1.101	5.0.0.209	5.0.0.202
CWS_LIC	-	5.0.1.102	5.0.0.102	5.0.0.102

n/a = not available

¹	DCC is the base management extension for all CWS. When you check in the extension of a connector, it also automatically checks in the DCC extension. One CWS extension is shared among all connector.

Supported endpoint solutions

After installing the agent, these products can be installed on the instances.

Endpoint Protection	CWS 5.3.4 5.3.3 5.3.2	CWS 5.3.1 and earlier
Endpoint Security (ENS) 10.x - Threat Prevention	Yes	Yes
Endpoint Security for Linux (ENSL) 10.x - Threat Prevention	Yes	Yes
Endpoint Security Adaptive Threat Protection (ATP)	Yes	Yes
Host Intrusion Prevention for Linux	Yes	Yes
Application Control	Yes	Yes
Change Control	Yes	Yes
Policy Auditor	Yes	No

Supported VMware environments

All versions of VMware are supported, according to the Management for Optimized Virtual Environments (MOVE) supported environments article. For details, see KB74865 - Supported platforms for Management for Optimized Virtual Environments.

NOTE: It's a best practice to install the vSphere connector and MOVE AntiVirus Agentless (MOVE AV Agentless) on the same versions.
When upgrading, implement the following upgrade steps:

Upgrade the vSphere connector extension first.
Complete a sync.
Upgrade the MOVE AV Agentless extension.

Supported VMs for metering on AWS

C1.MEDIUM, C1.XLARGE
C3.LARGE, C3.XLARGE, C3.2XLARGE, C3.4XLARGE, C3.8XLARGE
C4.LARGE, C4.XLARGE, C4.2XLARGE, C4.4XLARGE, C4.8XLARGE
CC2.8XLARGE
CG1.4XLARGE
CR1.8XLARGE

D2.XLARGE, D2.2XLARGE, D2.4XLARGE, D2.8XLARGE

G2.2XLARGE

HI1.4XLARGE, HS1.8XLARGE

I2.XLARGE, I2.2XLARGE, I2.4XLARGE, I2.8XLARGE

M1.SMALL, M1.MEDIUM, M1.LARGE, M1.XLARGE
M2.XLARGE, M2.2XLARGE, M2.4XLARGE
M3.MEDIUM, M3.LARGE, M3.XLARGE, M3.2XLARGE
M4.LARGE, M4.XLARGE, M4.2XLARGE, M4.4XLARGE, M4.10XLARGE

R3.LARGE, R3.XLARGE, R3.2XLARGE, R3.4XLARGE, R3.8XLARGE

T2.NANO T1.MICRO. T2.MICRO, T2.SMALL, T2.MEDIUM, T2.LARGE

Supported VMs for metering on Azure

Basic_A0, Basic_A1, Basic_A2, Basic_A3, Basic_A4

Standard_A0, Standard_A1, Standard_A2, Standard_A3, Standard_A4, Standard_A5,
Standard_A6, Standard_A7, Standard_A8, Standard_A9, Standard_A10, Standard_A11

Standard_D1, Standard_D2, Standard_D3, Standard_D4, Standard_D11, Standard_D12, Standard_D13, Standard_D14

Standard_D1_v2, Standard_D2_v2, Standard_D3_v2, Standard_D4_v2, Standard_D5_v2,
Standard_D11_v2, Standard_D12_v2, Standard_D13_v2, Standard_D14_v2, Standard_D15_v2

Standard_DS1, Standard_DS2, Standard_DS3, Standard_DS4, Standard_DS11, Standard_DS12,
Standard_DS13, Standard_DS14

Standard_DS1_v2, Standard_DS2_v2, Standard_DS3_v2, Standard_DS4_v2, Standard_DS5_v2,
Standard_DS11_v2, Standard_DS12_v2, Standard_DS13_v2, Standard_DS14_v2, Standard_DS15_v2

Standard_G1, Standard_G2, Standard_G3, Standard_G4, Standard_G5

Standard_GS1, Standard_GS2, Standard_GS3, Standard_GS4, Standard_GS5

ePO and Trellix Agent requirements

ePO requirements

Product	ePO 5.10 CU15	ePO 5.10	ePO 5.9.1	ePO 5.9.0 HF1208662	ePO¹ 5.9.0	ePO 5.3.3
CWS 5.3.4	Yes	No	No	No	No	No
CWS 5.3.3 CWS 5.3.2	No	Yes	Yes	No	No	No
CWS 5.3.1 CWS 5.3.0	No	Yes	Yes	Yes	Yes	Yes
CWS 5.2.0 HF1239584	No	Yes	Yes	Yes	No	Yes
CWS 5.2.0	No	No	Yes	Yes	No	Yes
CWS 5.1.x	No	No	Yes	No	Yes²	Yes
CWS 5.0.x	No	No	Yes	No	Yes²	Yes

¹	CWS 5.0 and later running on ePO 5.9.0 requires the Common UI 1.3 extension.
²	The ePO 5.9 Hotfixes (HF-EPO590HF1193951, EPO5xHF1202868, EPO590HF1208662, HF1191751) are a mandatory prerequisite to support CWS 5.0 cloud connectors.

Trellix Agent requirements

NOTE: McAfee Agent (MA) was rebranded to Trellix Agent in version 5.7.7.

TA Version¹	CWS 5.3.4	CWS 5.3.3	CWS 5.3.2	CWS 5.3.1	CWS 5.3.0	CWS 5.2.0	CWS 5.0.x 5.1.x (EOL)	MA Compatible Article
TA 5.7.8	Yes	Yes	No	No	No	No	EOL	KB93915
MA (TA) 5.7.0–5.7.7	Yes	Yes	No	No	No	No	EOL	KB93915

MA 5.6.6	No	Yes	No	No	No	No	EOL	KB93337
MA 5.6.5	No	Yes	Yes	No	No	No	EOL	KB92718
MA 5.6.4	No	Yes	Yes	No	No	No	EOL	KB92483
MA 5.6.3	No	Yes	Yes	Yes	Yes	No	EOL	KB92240
MA 5.6.2	No	Yes	Yes	Yes	No	No	EOL	KB91869
MA 5.6.0, 5.61	No	Yes	Yes	Yes	Yes	No	EOL	KB91021

MA 5.5.1–5.5.2	EOL							-
MA 5.5.0	EOL							-
MA 5.0.0–5.0.5	EOL							-

¹	KB85233 - How to install McAfee Agent on cloud instances using the McAfee Agent Deployment URL feature.

Browser requirements

Supported Browser	CWS 5.0.x 5.1.x 5.2.x 5.3.x
Internet Explorer 11 and later, supported with Compatibility Mode	Yes
Google Chrome 62.0 or later	Yes

NOTE: If you use an unsupported browser, the Visualization user interface doesn't work.

Related Information

Contact Technical Support

To contact Technical Support, go to the Create a Service Request page and log on to the ServicePortal.

If you are a registered user, type your User ID and Password, and then click Log In.
If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.

Product Documentation

For product documents, go to the Product Documentation portal.

Product Idea

To submit a new product idea, go to the Enterprise Customer Product Ideas page.

Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website.

For more information about product ideas, see KB60021 - How to submit a Product Idea.

End of Life Notices

For End of Life (EOL) information, see Product End of Life Information.
For EOL policy details, see the Corporate Products EOL policy.

Definitions:

EOL period—The time frame that runs from the day we announce product discontinuation, until the last date that we formally support the product. In general, after the EOL period is announced, no enhancements are made.
EOL date—The last day that the product is supported, according to the terms of our standard support offering.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Supported platforms for Cloud Workload Security

Environment

Summary

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

Supported platforms for Cloud Workload Security

Environment

Summary

Related Information

Affected Products

Languages:

Choose your region

Title

Title