ENSSP detects and removes viruses, malware, and other potentially unwanted software programs from your network-attached storage (NAS) devices. ENSSP is added to ENS and expands its capability. The software performs remote scanning on NAS devices such as NetApp filers and Internet Content Adaptation Protocol (ICAP) storage appliances.

NOTES:

• Most of the following information is available in the relevant product installation guides and Release Notes. Because Microsoft releases new operating systems or Service Packs regularly, the original product guides are unlikely to reflect the most recent support policy.
• This article contains the latest information. Some of this information is available through linked Product Management statements, which are also published in the Knowledge Base.
• Operating system Service Packs are synchronized and supported via the manufacturer.
• We update the supportability information for each new Microsoft Windows operating system. This update occurs after the Microsoft operating system is released to manufacturing, and within 30 days of the operating system release.

Recent updates to this article

Date	Update
May 7, 2024	Added ENSSP 2.4 Refresh release details.

Contents
Click to expand the section you want to view:

NOTE: If you're migrating from VirusScan Enterprise for Storage (VSES) to ENSSP, make sure that you have the VSES 1.3.0.149 version of the extension installed in ePolicy Orchestrator (ePO) before checking in the ENSSP extension. VSES 1.3.0.149 is the minimum requirement to migrate from VSES to ENSSP.

IMPORTANT: Version 2.4 and later implement Azure Cloud Signing (ACS). To support ACS signing, Windows platforms require specific Microsoft updates to be applied prior to installing or updating to this release. For more information, see KB96488 - Endpoint Security 10.7.0 Requires Azure Code Signing Updates From April 2023.
 

ENSSP product release information

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.

Product Version	Module	Build Number1	Release Notes	Known Issues	Release Date
2.4 (Refresh)	Storage Protection client	2.4.0.31.1	Release Notes	KB94812	May 6, 2024
	Common client	10.7.0.6809
	Firewall client	10.7.0.6486
	Threat Prevention client	10.7.0.6711
	Web Control client	10.7.0.6126
	Adaptive Threat Protection client	10.7.0.6887
	Storage Protection extension	2.4.0.694
	Common extension	10.7.0.5848
	Firewall extension	10.7.0.6486
	Threat Prevention extension	10.7.0.5673
	Web Control extension	10.7.0.5517
	Adaptive Threat Protection extension	10.7.0.5556
2.4	Storage Protection client	2.4.0.672	Release Notes	KB94812	May 9, 2023
	Common client	10.7.0.5828
	Firewall client	10.7.0.5950
	Threat Prevent client	10.7.0.5786
	Web Control client	10.7.0.5620
	Adaptive Threat Protection client	10.7.0.6144
	Storage Protection extension	2.4.0.692
	Common extension	10.7.0.5269
	Firewall extension	10.7.0.5440
	Threat Prevention extension	10.7.0.5223
	Web Control extension	10.7.0.5160
	Adaptive Threat Protection extension	10.7.0.5147
2.3	Storage Protection client	2.3.0.639	Release Notes	KB94812	December 20, 2022
	Common client	10.7.0.5162
	Firewall client	10.7.0.5131
	Threat Prevention client	10.7.0.5200
	Web Control client	10.7.0.5162
	Adaptive Threat Protection client	10.7.0.5177
	Storage Protection extension	2.3.0.636
	Common extension	10.7.0.5113
	Firewall extension	10.7.0.5093
	Threat Prevention extension	10.7.0.5102
	Web Control extension	10.7.0.5087
	Adaptive Threat Protection extension	10.7.0.5081
2.2	Storage Protection client	2.2.0.625	Release Notes	KB94812	June 30, 2022
	Common client	10.7.0.3468
	Firewall client	10.7.0.2298
	Threat Prevention client	10.7.0.3497
	Web Control client	10.7.0.2697
	Adaptive Threat Protection client	10.7.0.3590
	Storage Protection extension	2.2.0.55
	Common extension	10.7.0.1149
	Firewall extension	10.7.0.1186
	Threat Prevention extension	10.7.0.1364
	Web Control extension	10.7.0.1231
	Adaptive Threat Protection extension	10.7.0.1197
2.1	Storage Protection client	2.1.0.560	Release Notes	KB94812	December 21, 2021
	Common client	10.7.0.3199
	Firewall client	10.7.0.2100
	Threat Prevention client	10.7.0.3210
	Web Control client	10.7.0.2532
	Adaptive Threat Protection client	10.7.0.3252
	Storage Protection extension	2.1.0.51
	Common extension	10.7.0.1022
	Firewall extension	10.7.0.1068
	Threat Prevention extension	10.7.0.1195
	Web Control extension	10.7.0.1111
	Adaptive Threat Protection extension	10.7.0.1080
2.0	Storage Protection client	2.0.0.256	Release Notes	KB94812	September 16, 2021
	Common client	10.7.0.3012
	Firewall client	10.7.0.2039
	Threat Prevention client	10.7.0.3113
	Web Control client	10.7.0.2463
	Adaptive Threat Protection client	10.7.0.3183
	Storage Protection extension	2.0.0.42
	Common extension	10.7.0.988
	Firewall extension	10.7.0.1025
	Threat Prevention extension	10.7.0.1155
	Web Control extension	10.7.0.1077
	Adaptive Threat Protection extension	10.7.0.1040

¹  The ENSW 10.7 versions listed here correspond to the versions ENSSP was bundled with at the time of its release.

Supported Microsoft Windows Server operating systems

The following table lists the products supported for use on Windows Server operating systems. Only the most current versions are included because most customers upgrade to the latest Service Packs shortly after they're released.
 

Microsoft Operating System	Supported Service Pack	ENSSP 2.0–2.4
Windows Server 2022 Standard, Datacenter	-	Yes
Windows Server 2019 Standard, Datacenter	-	Yes
Windows Server 2016 Standard, Datacenter	-	Yes
Windows Server 2012 Release 2	-	Yes

Compatibility with ePO and Trellix Agent (TA)

TA
To verify which version is supported on your operating system, see the TA documentation.
 

Product	Minimum TA Version
ENSSP 2.x	TA 5.7.x is recommended. TA 5.6.x is the minimum. NOTE: TA 5.5.x reached End of Life (EOL) on December 16, 2020.

 
ePO
 

Product	Minimum ePO Version
ENSSP 2.x	ePO 5.10.x is recommended. ePO 5.9.0 is the minimum. NOTE: ePO 5.9.0 reached EOL on August 31, 2021. ePO 5.3.x reached EOL on March 31, 2019.

Minimum ENS version needed to support ENSSP

The minimum ENS version needed to support ENSSP is as shown below:
 

Product	Minimum ENS Version1
ENSSP 2.4.0 (Refresh)	ENS 10.7.0 May 2024 Update Common client (ENS Platform) minimum version: 10.7.0.6809 ENS Threat Prevention client minimum version: 10.7.0.6711
ENSSP 2.4.0	ENS 10.7.0 April 2023 Repost: Common client (ENS Platform) minimum version: 10.7.0.5828 ENS Threat Prevention client minimum version: 10.7.0.5786
ENSSP 2.3.0	ENS 10.7.0 November 2022 refresh Update: Common client (ENS Platform) minimum version: 10.7.0.5162 ENS Threat Prevention client minimum version: 10.7.0.5200
ENSSP 2.2.0	ENS 10.7.0 June 2022 Update: Common client (ENS Platform) minimum version: 10.7.0.3468 ENS Threat Prevention client minimum version: 10.7.0.3497 NOTE: The ENSSP 2.2.0 extension isn't backward compatible with older client versions. It's recommended to upgrade both the Storage Protection extension and client version to 2.2.0. If you upgrade only the Storage Protection extension to 2.2.0, ENSSP Storage Protection statistics queries don't work.
ENSSP 2.1.0	ENS 10.7.0 November 2021 Update: Common client (ENS Platform) minimum version: 10.7.0.3199 ENS Threat Prevention client minimum version: 10.7.0.3210
ENSSP 2.0.x	ENS 10.7.0 September 2021 Update: Common client (ENS Platform) minimum version: 10.7.0.3012 ENS Threat Prevention client minimum version: 10.7.0.3113

¹ ENSSP is compatible with all ENSW 10.7 and later versions, unless otherwise specified.

Third-party product support

ENSSP currently supports NetApp ONTAP 8 and 9 in clustered mode, and 7-Mode (ENSSP 2.1 or later is needed). To review the NetApp interoperability matrix, log on to the NetApp site and use the search string "Trellix." NetApp account registration might be needed.

NOTE: Trellix recommends using NetApp ONTAP AV Connector version 1.0.5P1 or later.
Testing of version 1.0.6 has been completed and no issues were observed. Download the latest NetApp AV connector from here.

Support is available for ICAP Clients adhering to RFC-3507, that have followed outlined the self-certification process and the criteria in:
KB75543 - Storage compatibility testing with ICAP-based NAS appliances.
 

Mode	ENSSP Support
Azure CVO (Cloud Volumes ONTAP for Azure)	ENSSP 2.1.0 and later
Azure NetApp Files	Not supported
ICAP	ENSSP 2.0.0 and later
NetApp C-Mode	ENSSP 2.0.0 and later
NetApp 7-Mode	ENSSP 2.1.0 and later

Vendor Certified

Third-Party Products	Version	ENSSP Compatibility	Configured in ENSSP Under
		2.x	NetApp Scanner	ICAP Scanner
Dell PowerScale (Isilon)1	OneFS 9.0–9.5	Yes	-	X
NetApp Using C-Mode (Clustered Mode)	ONTAP: 9.x and later 8.2.1 and later	Yes	X	-
NetApp Using 7-Mode (Legacy Mode)	ONTAP: 8.2.x 8.1 8.0	Yes. 7-Mode requires ENSSP 2.1.0 or later.	X	-
Nutanix Files	4.3, 4.2.1.1, 4.1.0, 3.8.1.3	Yes	-	X
Panzura CloudFS	PzoS 8.2.0.0	Yes	-	X

¹ Trellix doesn't recommend manually increasing the Isilon AV thread-pool / worker pool maximum size without first consulting Dell Support. For more information, see Dell Knowledge Base Article 000041466 (Dell Support account required).

Process for certification:

• Vendors interested in self-certifying their storage solutions with ENSSP can contact our Security Innovation Alliance to begin this process. 
• Customers using a storage solution can contact their storage vendor about becoming self-certified for integration with ENSSP. Guide your storage vendor to follow the process above to become certified.
  
  NOTE: Technical Support is available to make sure that the ENSSP product functions and configurations are correct. But, Technical Support can't directly help with configuration of a third-party product to pass self-certification.

Several vendors who were self-certified with our previous storage scanning solution, VSES, are undergoing self-certification with ENSSP. To understand whether your storage solution is undergoing self-certification, contact your storage solution vendor directly. This article will be updated to reflect specific vendors as they're self-certified.

NOTE: We support the protocol, not hardware. As long as the appliances (NAS) integrate properly with the standard ICAP and NetApp protocols, we can support it. We're fairly agnostic to vendor hardware as we don't directly integrate at the hardware level, we integrate at the protocol level. So, follow the self-certification process to confirm support for appliances.