Differences between updating the Sensor by Manager and updating it by TFTP
Last Modified: 2024-01-24 10:35:57 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Differences between updating the Sensor by Manager and updating it by TFTP
Technical Articles ID:
KB60807
Last Modified: 2024-01-24 10:35:57 Etc/GMT Environment
Trellix Intrusion Prevention System (Trellix IPS)
SummaryYou can update Sensor software either via a Manager or a TFTP server. It's important to know the differences between the two and the issues that can arise by a TFTP update, especially when you perform a major version upgrade. For example, a major upgrade would be upgrading from version 10.1 to 11.1
When you update a Sensor via the Manager, both the Sensor software and the sigset are bundled together and sent to the Sensor. The Sensor updates its software, reboots, and then applies the sigset that has been stored on the Sensor.
When updating a Sensor via TFTP, only the Sensor software is transferred across. After updating its software, the Sensor reboots. When the Sensor reboots, it deletes the sigset that's currently loaded, and then contacts the Manager for the most current sigset. So, the delay to bring up the Sensor to working order is much longer with a TFTP update. IMPORTANT: We recommend that you always update the Sensor software via the Manager for any major upgrade. Affected ProductsLanguages:This article is available in the following languages: |
|