Catalog

Browse courses and certifications across cybersecurity domains

142 courses found
Alert Analysis and Diagnostics with Email Security Server
Advanced 4.0

Course Length: 2 days Overview: This course provides a framework for administration and day-to-day use of the Trellix Email Security – Server, including deployment, configuration, basic administration, and analysis of malicious emails. Learners will triage Trellix-generated alerts and derive actionable information to assess threats to their environment. The course also includes: Checklists Case studies Guidance for transitioning difficult cases to the Trellix Support team Hands-on activities provide learners with experience administering Email Security – Server, diagnosing common issues, and triaging alerts generated from malicious files and URLs in email to identify malware and other unwanted intrusions. Who Should Attend: Security analysts, incident responders, and email administrators responsible for the setup and management of Email Security – Server and who use Email Security – Server to detect, investigate, and prevent cyber threats. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 16 Hours
  • 1 lesson
  • 67
  • Advanced
Vouchers : 147
Course Guide PDF Add to cart
Alert Analysis and Investigations with Network NX and Endpoint Security HX
Advanced 4.0

Course Length: 4 days Overview: This course examines how to triage alerts generated by the Trellix Network Security and Endpoint Security (HX) platforms, derive actionable information from those alerts, and inspect affected endpoints using live analysis and investigation fundamentals. Hands-on activities span the entire analysis and live investigation process, beginning with a Trellix-generated alert, leading to discovery and analysis of the host for evidence of malware and other unwanted intrusion. Endpoint analysis focuses on investigation techniques using features of Endpoint Security (HX), such as: Triage Summary Audit Viewer Acquisitions Who Should Attend: Security analysts, incident responders, and threat hunters who use Network Security and Endpoint Security (HX) to detect, investigate, and prevent cyber threats. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 02/16/2027 9:00AM - 02/19/2027 4:00PM
  • 32 Hours
  • 1 lesson
  • 267
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
Alert Analysis and Investigations with Network Security NX
Advanced 4.0

Course Length: 2 days Overview: This course examines how to triage alerts generated by Trellix Network Security, derive actionable information from those alerts, and apply the fundamentals of live analysis and investigation to investigate associated endpoints. Course Highlights: Hands-on activities span the entire analysis and live investigation process, beginning with a Trellix-generated alert, leading to discovery and analysis of the host for evidence of malware and other unwanted intrusion. Analysis will be performed using Trellix products and freely available tools. Who Should Attend: Security analysts, incident responders, and network security professionals who use Network Security to detect, investigate, and prevent cyber threats. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/11/2027 9:00AM - 01/12/2027 4:00PM
  • 24 Hours
  • 1 lesson
  • 261
  • Advanced
Vouchers : 22
Course Guide PDF Add to cart
Application and Change Control Administration
Advanced 4.0

Course Length: 4 days Overview: The Trellix Application and Change Control Administration course from Education Services provides in-depth training on the tools you need to efficiently install, configure, operate, and troubleshoot issues relating to TACC to safeguard intellectual property and ensure compliance. Course Highlights: The course details how this solution uses Trellix ePolicy Orchestrator (Trellix ePO) for centralized management. It also explains how to use Application Control for dynamic allowlisting to ensure that only trusted applications run on devices, servers, and desktops and how to use Change Control to monitor and prevent changes to the file system, registry, and user accounts. Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with system security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 02/23/2027 9:00AM - 02/26/2027 3:00PM
  • 32 Hours
  • 1 lesson
  • 202
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
Application Control and Change Control for Windows Essentials - Configuration
Beginner 3.0

This course provides an in-depth introduction to the tasks required to configure Trellix Application and Change Control (TACC) in a customer’s environment.Course Highlights:Application and Change Control is made up of three components: Application Control, Change Control, and Integrity Monitor.Application Control uses dynamic allowlisting to make sure that only trusted applications run on devices, servers, and desktops.Change Control allows you to monitor and prevent changes to the file system, registry, and user accounts.Integrity Monitor provides real-time monitoring and identifies transient change violations.This course is designed as a practical starting point for someone who is new to supporting Application and Change Control.Download PDF Course Data Sheet

  • 1 Hour
  • 2 lessons
  • 255
  • Beginner
Thrive Login
Course Guide PDF Register
Application Control and Change Control for Windows Essentials - Deployment
Beginner 4.0

This course provides a comprehensive overview on installing Trellix Application and Change Control (TACC) packages and extensions on the ePolicy Orchestrator and deploying the product to the endpoint systems in your environment.Course Highlights:Application and Change Control is made up of three components: Application Control, Change Control, and Integrity Monitor.Application Control uses dynamic allowlisting to make sure that only trusted applications run on devices, servers, and desktops.Change Control allows you to monitor and prevent changes to the file system, registry, and user accounts.Integrity Monitor provides real-time monitoring and identifies transient change violations.This course is designed as a practical starting point for someone who is new to deploying Application and Change Control.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 256
  • Beginner
Thrive Login
Course Guide PDF Register
Application Control and Change Control for Windows Essentials - Introduction
Beginner 4.0

This course provides an in-depth solution overview and guide for planning a successful Application and Change Control (TACC) deployment in your environment.Course Highlights:Application and Change Control is made up of three components: Application Control, Change Control, and Integrity Monitor.Application Control uses dynamic allowlisting to make sure that only trusted applications run on devices, servers, and desktops.Change Control allows you to monitor and prevent changes to the file system, registry, and user accounts.Integrity Monitor provides real-time monitoring and identifies transient change violations.This course bundle is designed as a practical starting point for someone who is new to supporting TACC.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 341
  • Beginner
Thrive Login
Course Guide PDF Register
Application Control and Change Control for Windows Essentials - Management
Beginner 4.0

This course provides an in-depth introduction to the tasks you can perform to manage a Trellix Application and Change Control (TACC) deployment.Course Highlights:ENS provides dashboards, queries, reports, log files, and events to monitor your ENS deployment.Application and Change Control is made up of three components: Application Control, Change Control, and Integrity Monitor.Application Control uses dynamic allowlisting to make sure that only trusted applications run on devices, servers, and desktops.Change Control allows you to monitor and prevent changes to the file system, registry, and user accounts.Integrity Monitor provides real-time monitoring and identifies transient change violations.This course is designed as a practical starting point for someone who is new to supporting Application and Change Control.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 216
  • Beginner
Thrive Login
Course Guide PDF Register
Central Management for System Administrators
Beginner 4.0

This entry-level course covers:Deployment optionsBasic administrationCore functionality for Trellix Central Management appliancesWho Should Attend:Network security professionals or incident responders who must set up or work with Central Management appliances.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 281
  • Beginner
Thrive Login
Course Guide PDF Register
Data Exchange Layer Essentials
Beginner 4.0

Welcome to the Trellix Data Exchange Layer 6.0 Essentials course.Course Highlights:This course provides an overview of the Data Exchange Layer (DXL) Product, key features, purpose, and benefits.It also provides a high-level overview of installation, configuration, management, and basic troubleshooting related to DXL.Download PDF Course Data Sheet

  • 2 Hours
  • 1 lesson
  • 296
  • Beginner
Thrive Login
Course Guide PDF Register
Data Loss Prevention - SaaS Essentials
Beginner 4.0

Previously known as MVISION Data Loss Prevention.Through e-learning and demonstrations, you will learn about using the tools needed to design, implement, configure, and use Trellix Data Loss Prevention - SaaS to safeguard intellectual property and ensure compliance.Download PDF Course Data Sheet

  • 8 Hours
  • 1 lesson
  • 332
  • Beginner
Thrive Login
Course Guide PDF Register
Data Loss Prevention Endpoint Administration
Advanced 4.0

Released: 16-Oct-2026 Course Duration: 4 days This course provides in-depth training on the tools needed to design, implement, configure, and use Trellix Data Loss Prevention Endpoint to safeguard intellectual property and ensure compliance. Additionally, the course details how to integrate and leverage Trellix ePolicy Orchestrator (ePO) for centralized management and policy enforcement. Who Should Attend: This course is intended for Security and Network administrators, IT professionals, Cybersecurity engineers, IT Audit, Governance and Compliance officers responsible for safeguarding sensitive corporate data, ensuring regulatory compliance, and managing policy enforcement. Download PDF Course Data Sheet

  • 01/19/2027 9:00AM - 01/22/2027 3:00PM
  • 32 Hours
  • 1 lesson
  • 489
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
Data Loss Prevention Network Administration
Advanced 4.0

Course Length: 4 days Overview: The Trellix Data Loss Prevention Network Administration course from Education Services provides in-depth training on the tools you need to design, implement, configure, and use Data Loss Prevention Network to safeguard intellectual property and ensure compliance. The course details how this solution uses Trellix ePolicy Orchestrator (ePO) software for centralized management. It also explains how to monitor and address risky, day-to-day end-user actions such as: Emailing Web posting Printing Clipboards Screen captures Device control Uploading to the cloud Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 32 Hours
  • 1 lesson
  • 118
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
Data Loss Prevention Network Essentials
Beginner 4.0

The Trellix Data Loss Prevention Network (NDLP) 11.6 Essentials course provides introduction level training on the tools you need to design, implement, configure, and use Network Data Loss Prevention to safeguard intellectual property and ensure compliance. The course details how this solution uses Trellix ePolicy Orchestrator (Trellix ePO) for centralized management. It also explains how to monitor and address day-to-day protection of email, web, and more. The course is divided into lessons.Each lesson is a combination of instructional material such as:TextsVideosExternal linksKnowledge checksInteractive learning experiencesPlease complete each lesson. Also, refer to all the documentation of this product. (Product Guide, Installation Guide, etc.)Download PDF Course Data Sheet

  • 8 Hours
  • 1 lesson
  • 777
  • Beginner
Thrive Login
Course Guide PDF Register
Database Security Administration
Advanced 5.0

Course Length: 2 days Overview: The Trellix Database Security Administration course from Education Services is an essential component to monitor and protect the Database Management System (DBMS). Course Highlights: In hands-on lab sessions, you will learn how to deploy and configure a Database Security solution to protect the Database Management System (DBMS) from internal and external threats, as well as intra-database exploits. You can immediately apply your new skills to improve protection for your business and take full advantage of your investment in our Database Security solution. Who Should Attend: System administrators, security personnel, auditors, and/or consultants concerned with system security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/19/2027 9:30AM - 01/20/2027 5:00PM
  • 16 Hours
  • 1 lesson
  • 95
  • Advanced
Vouchers : 22
Course Guide PDF Add to cart
Database Security Essentials - Dashboard and Reporting
Beginner 0.0

Trellix Database Security finds and protects sensitive information in databases from accidental leakage and intentional exposure while maintaining security, optimizing performance, and managing access. The available Dashboard displays a wide range of statistical data regarding the status of alerts, DBMS monitoring, security updates, and rules, while the Reporting is how we collate the alerts generated by DAM and DVM into a format usable by auditors, managers, and administrators alike.

  • 5 Hours
  • 1 lesson
  • 53
  • Beginner
Thrive Login
Register
Database Security Essentials - Maintenance and Troubleshooting
Beginner 5.0

Maintaining the Database Security product includes updating the license file, checking for the new updates for vPatch security, VA security, and other software.Course Highlights:This course also covers troubleshooting that you can perform on your own, for issues such as encountering problems while installing the sensor, for example, or if you have installed a sensor and No sensors detected is displayed when you log in to the web console.It's also helpful to know the product's log files.The information in logs can play an important role in the troubleshooting process.This course also covers steps on how to run the diagnostic tool (Analytic package) and supply it to the Trellix support team.

  • 50 Hours
  • 1 lesson
  • 52
  • Beginner
Thrive Login
Register
Database Security Essentials - Monitoring Database Activity
Beginner 5.0

Welcome to the Trellix Database Security Essentials - Monitoring Database Activity course module. The purpose of this course module is to show how Database Activity Monitoring performs real time monitoring of all database activity and can, in real time, send alerts to the administrator of any unauthorized SQL commands and in some cases even block unauthorized access.

  • 50 Hours
  • 1 lesson
  • 69
  • Beginner
Thrive Login
Register
Detection and Prevention with ENS Expert Rules Essentials
Beginner 4.0

The Detection & Prevention with Trellix ENS Expert Rules course provides a comprehensive training on the capability of ENS Expert Rules. Through video lectures and interactive activities, you will learn how Expert Rules work, how to create and use them, and how to use and edit AAC-based Expert Rules.Download PDF Course Data Sheet

  • 3 Hours
  • 1 lesson
  • 323
  • Beginner
Thrive Login
Course Guide PDF Register
Digital Forensics and Incident Response Fundamentals
Advanced

Course Length: 4 days Overview: This entry-level course in digital forensics and incident response provides foundational knowledge in: Incident response preparation Detection and analysis Containment Eradication Recovery Post-incident activities, including lessons learned This course employs open-source tools to perform triage and forensics analysis in hands-on labs, touching on the key artifacts of Microsoft Windows, Linux, and Apple macOS systems. This course is part of the Trellix Cyber Operations team’s Foundations in Incident Response Education (FIRE) track of general defensive security training. Learners are provided a blend of lecture, discussions, and hands-on labs. Who Should Attend: This course is intended for incident responders, information security staff, auditors, SOC analysts, investigators, and consultants responsible for digital forensics and incident response. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 04/05/2027 9:30AM - 04/08/2027 5:00PM
  • 1 lesson
  • 94
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
Drive Encryption Essentials
Beginner 4.0

The Drive Encryption Essentials course from Education Services provides attendees with interactive training on the design, setup, configuration, and management of encryption software. In addition, students will understand how to effectively implement the software in a complex enterprise. Download PDF Course Data Sheet

  • 4 Hours
  • 1 lesson
  • 165
  • Beginner
Thrive Login
Course Guide PDF Register
Drive Encryption for PC Administration
Intermediate 5.0

Course Length: 4 days Overview: The Trellix Drive Encryption Administration course from Education Services provides an in-depth introduction to the tasks crucial to set up and administer Drive Encryption. Course Highlights: Drive Encryption is full disk encryption software that helps protect data on Microsoft Windows tablets, laptops, and desktop PCs to prevent the loss of sensitive data, especially from lost or stolen equipment. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with virtual lab systems, as well as detailed instructions for the integration of this solution. Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security and drive encryption. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 32 Hours
  • 1 lesson
  • 39
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
Email Security Cloud for Analysts
Beginner 4.0

This entry-level course provides an overview of the features and detection capabilities of Trellix Email Security - Cloud. It also covers email policy and rule configuration, email quarantine and alert administration.Who Should Attend:Security analysts and administrators responsible for the setup and management of Email Security - Cloud.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 153
  • Beginner
Thrive Login
Course Guide PDF Register
Email Security Server for System Administrators Essentials
Beginner 5.0

This entry-level online course covers deployment options, basic administration and core functionality for Trellix Email Security - Server appliances.Who Should Attend:Network security professionals, incident responders, and Trellix administrators and analysts who must set up or work with a Trellix Email Security appliance.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 315
  • Beginner
Thrive Login
Course Guide PDF Register
Endpoint Detection and Response Administration
Intermediate 4.0

Course Length: 2 days Overview: The Trellix Endpoint Detection and Response Administration course from Education Services prepares SOC Analysts to understand, communicate, and use the features provided by Endpoint Detection and Response (EDR). Course Highlights: Trellix EDR helps to manage the high volume of alerts, empowering analysts of all skill levels to do more and investigate more effectively. Through hands-on lab exercises, you will learn how to detect advanced device threats, fully investigate, and quickly respond. Who Should Attend: Analysts and/or Engineers responsible for configuration, management, and monitoring activity on their systems, networks, databases and applications using the EDR solution. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 02/09/2027 9:30AM - 02/10/2027 5:00PM
  • 16 Hours
  • 1 lesson
  • 286
  • Intermediate
Vouchers : 22
Course Guide PDF Add to cart
Endpoint Detection and Response Essentials
Beginner 4.0

The Trellix EDR Essentials course from Education Services provides instruction on the design, setup, configuration, and management of this application.Course Highlights:In addition, students will learn how to effectively leverage Trellix EDR in their environment.This course is roughly four hours in length.Download PDF Course Data Sheet

  • 4 Hours
  • 1 lesson
  • 945
  • Beginner
Thrive Login
Course Guide PDF Register
Endpoint Detection and Response with Forensics - SaaS Administration
Intermediate 4.0

Course Length: 4 days Overview: This course provides IT Administrators, Security Analysts, and Incident Responders with the specialized knowledge required to deploy, configure, and utilize the Trellix EDRF ecosystem. The curriculum focuses on the integration of traditional EDR capabilities with deep-dive forensic artifacts. Key highlights include: The leverage of Trellix Wise for automated investigations The utilization of enhanced forensic collection modules (Command Shell, PowerShell, and Full Memory acquisition) The implementation of advanced remediation workflows Participants will learn to move beyond simple alert monitoring to proactive threat hunting using the specialized Endpoint Detection and Response and Forensics Workspaces. Who Should Attend: This course is intended for IT Administrators, Security Analysts, and Incident Responders concerned with system endpoint security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/05/2027 9:00AM - 01/08/2027 3:00PM
  • 24 Hours
  • 1 lesson
  • 61
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
Endpoint Detection and Response with Forensics On-Prem Analyst
Advanced 0.0

Course Length: 2 days Overview: This course equips Security Analysts and Incident Responders to detect, investigate, and remediate endpoint threats using Trellix EDR with Integrated Forensics On-Premises (EDRF On-Prem). Designed for air-gapped, high-security, or regulated environments, it covers a localized three-server topology: ePolicy Orchestrator (ePO) On-Premises, Forensics HX Controller, and EDRF Telemetry Store (OpenSearch cluster) connected via Data Exchange Layer (DXL). Core topics include: Monitoring host alerts Threat hunting with Historical Search, Enterprise Search, Process and Logon Trackers Obtaining forensic acquisitions (File, Triage, Data) Auditing evidence via Audit Viewer Localized containment with remote shell remediation This course also includes usage of the ETS Explorer and HX Tool. Who Should Attend: Security Analysts, Incident Responders, and Threat Hunters concerned with Endpoint Security and Forensic investigation. Download PDF Course Data Sheet

  • 01/20/2027 9:00AM - 01/22/2027 4:00PM
  • 16 Hours
  • 1 lesson
  • 24
  • Advanced
Vouchers : 22
Course Guide PDF Add to cart
Endpoint Security - SaaS with ePolicy Orchestrator - SaaS Administration
Intermediate 5.0

Course Length: 4 days Overview: The Trellix Endpoint Security - SaaS with Trellix ePolicy Orchestrator - SaaS Administration course from Education Services provides an in-depth introduction to the tasks crucial to set up and administer Endpoint Security - SaaS in an ePO - SaaS managed customer environment. Course Highlights: Endpoint Security - SaaS leverages and enhances built-in Windows 10 Windows Defender security with advanced protection for Windows 10 and Windows Server 2016 and newer systems. ePO - SaaS is a SaaS-based centralized security management console that enables management of Microsoft Defender along with Trellix security products. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the Endpoint Security - SaaS policies in the ePO - SaaS user interface, as well as detailed instructions for the integration of this solution. Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with administering Endpoint Security - SaaS on ePO - SaaS. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 32 Hours
  • 1 lesson
  • 22
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
Endpoint Security (ENS) Administration
Intermediate 4.0

Course Length: 4 days Overview: This course provides an in-depth introduction to the tasks crucial to set up and administer Trellix Endpoint Security (ENS). Endpoint Security combines Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control to take immediate action against potentially dangerous applications, downloads, websites, and files. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the Endpoint Security client user interface and policies, as well as detailed instructions for the integration of this solution. Learning Objectives: After completing this course, learners should be able to: Plan an Endpoint Security deployment Install required software components Configure and use the Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control components Monitor and report on security status Identify the other security solutions with which ENS integrates, as well as the integration requirements and procedures Who Should Attend: This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/18/2027 9:30AM - 01/21/2027 5:00PM
  • 32 Hours
  • 1 lesson
  • 279
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
Endpoint Security (HX) Essentials - Introduction
Beginner 4.0

This course provides an introduction to Trellix Endpoint Security (HX).Course Highlights:Trellix Endpoint Security (HX) performs fast, targeted forensic investigations across thousands of endpoints.It prevents cyber-attacks on the endpoint, detects malware and other signs of compromise, and allows customers to respond to endpoint security incidents faster.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 225
  • Beginner
Thrive Login
Course Guide PDF Register
Endpoint Security ENS Administration (EMEA 5 Day)
Intermediate 4.0

Course Length: 5 days Overview: This course provides an in-depth introduction to the tasks crucial to set up and administer Trellix Endpoint Security (ENS). Endpoint Security combines Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control to take immediate action against potentially dangerous applications, downloads, websites, and files. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the Endpoint Security client user interface and policies, as well as detailed instructions for the integration of this solution. Learning Objectives: After completing this course, learners should be able to: Plan an Endpoint Security deployment Install required software components Configure and use the Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control components Monitor and report on security status Identify the other security solutions with which ENS integrates, as well as the integration requirements and procedures Who Should Attend: This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 02/01/2027 9:00AM - 02/05/2027 5:00PM
  • 40 Hours
  • 22 lessons
  • 117
  • Intermediate
Vouchers : 55
Course Guide PDF Add to cart
Endpoint Security ENS Essentials
Beginner 3.0

This course provides an introduction to the tasks required to install and deploy Trellix Endpoint Security (ENS) Release 10.7.Course Highlights:ENS combines Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control to take immediate action against potentially dangerous applications, downloads, websites, and files.This course is designed as a practical starting point for someone who is new to supporting Endpoint Security.Download PDF Course Data Sheet

  • 4 Hours
  • 1 lesson
  • 2558
  • Beginner
Thrive Login
Course Guide PDF Register
Endpoint Security ENS Expert Rules Creation Advanced
Advanced 4.0

Course Length: 5 days Overview: The Endpoint Security ENS Expert Rules Creation Advanced course from Education Services provides insights into our proprietary syntaxes and an advanced view into Operating System concepts and references needed to better understand how ENS works. Course Highlights: Building on the ENS Platform, ENS Expert Rules allow the advanced ENS administrator to add deeper security to their ENS deployment. This course helps administrators fully comprehend how ENS Expert Rules can provide a more customized and secure environment. Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 02/15/2027 1:00PM - 02/19/2027 8:00PM
  • 40 Hours
  • 1 lesson
  • 53
  • Advanced
Vouchers : 55
Course Guide PDF Add to cart
Endpoint Security Essentials - Configuration
Beginner 4.0

This course provides an in-depth introduction to the tasks required to configure Trellix Endpoint Security (ENS) using the client user interface and the ENS policies on ePO.Course Highlights:Endpoint Security combines the Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control modules to take immediate action against potentially dangerous applications, downloads, websites, and files.This course is designed as a practical starting point for someone who is new to supporting Endpoint Security.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 606
  • Beginner
Thrive Login
Course Guide PDF Register
Endpoint Security Essentials - Deployment
Beginner 4.0

This course provides a comprehensive overview on installing the Trellix Endpoint Security (ENS) packages and extensions on the ePolicy Orchestrator and deploying the ENS client to the endpoint systems in your environment.Course Highlights:Endpoint Security combines the Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control modules to take immediate action against potentially dangerous applications, downloads, websites, and files.This course is designed as a practical starting point for someone who is new to deploying Endpoint Security.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 611
  • Beginner
Thrive Login
Course Guide PDF Register
Endpoint Security Essentials - Introduction
Beginner 4.0

This course provides an in-depth solution overview and guide for planning a successful Trellix Endpoint Security (ENS) deployment in your environment.Course Highlights:Endpoint Security combines the Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control modules to take immediate action against potentially dangerous applications, downloads, websites, and files.This course is designed as a practical starting point for someone who is new to supporting Endpoint Security.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 912
  • Beginner
Thrive Login
Course Guide PDF Register
Endpoint Security Essentials - Monitoring and Reporting
Beginner 4.0

This course provides an in-depth introduction to the tasks you can perform to monitor and report on Trellix Endpoint Security (ENS).Course Highlights:ENS provides dashboards, queries, reports, log files, and events to monitor your ENS deployment.Endpoint Security combines the Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control modules to take immediate action against potentially dangerous applications, downloads, websites, and files.This course is designed as a practical starting point for someone who is new to supporting Endpoint Security.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 582
  • Beginner
Thrive Login
Course Guide PDF Register
Endpoint Security HX Administration
Intermediate 4.0

Course Length: 1 day Overview: This course provides a framework for administration and diagnostics of the Trellix Endpoint Security (HX) server and the Trellix xAgent. Course Highlights: The course introduces deployment, configuration and basic administration for Trellix Endpoint Security (HX), and includes checklists, case studies and guidance for transitioning difficult cases to the Trellix Support team. Optional modules include Trellix core hardware and virtual appliances. Hands-on activities provide learners with experience administering the appliance and diagnosing common issues. Who Should Attend: System administrators responsible for implementing and maintaining the Endpoint Security (HX) server and endpoint agent (xAgent). To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 02/12/2027 9:00AM - 02/12/2027 4:00PM
  • 8 Hours
  • 1 lesson
  • 582
  • Intermediate
Vouchers : 11
Course Guide PDF Add to cart
Endpoint Security HX for Analysts
Advanced 3.0

This entry-level course covers core functionality of Trellix Endpoint Security (HX), including:FeaturesOperational workflowsAlert analysisContainmentWho Should Attend:Analysts and Incident Responders who use Trellix Endpoint Security (HX).Download PDF Course Data Sheet

  • 25 Hours
  • 1 lesson
  • 339
  • Advanced
Thrive Login
Course Guide PDF Register
Endpoint Security HX for System Administrators
Advanced 4.0

This entry-level course covers deployment options, basic administration and core functionality for Trellix Endpoint Security (HX).Who Should Attend:System Administrators and security professionals who must set up and work with Trellix Endpoint Security (HX).Download PDF Course Data Sheet

  • 25 Hours
  • 1 lesson
  • 346
  • Advanced
Thrive Login
Course Guide PDF Register
Enterprise Security Manager Essentials - Introduction
Beginner 4.0

This course provides an overview of the Enterprise Security Manager product, key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration of the product along with basic troubleshooting guidance.

  • 1 Hour
  • 1 lesson
  • 377
  • Beginner
Thrive Login
Register
ePolicy Orchestrator - SaaS Essentials - Management
Beginner 5.0

The ePolicy Orchestrator – SaaS Essentials: Management course provides attendees with information on using dashboards, queries, and reports, Threat Events Application Programming (API), and Protection Workspace to monitor an environment in Trellix ePolicy Orchestrator (ePO) – SaaS.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 74
  • Beginner
Thrive Login
Course Guide PDF Register
ePolicy Orchestrator Administration
Intermediate 4.0

Course Length: 4 days Overview: The Trellix ePolicy Orchestrator – On-prem Administration course enables attendees to receive in-depth training on the benefits of the centralized management and deployment of products using ePolicy Orchestrator (ePO) – On-prem software. Course Highlights: Enabling administrators to fully understand the capabilities of their security solution not only reduces the risks of misconfiguration, but also ensures that an organization gets the maximum protection from installation. This course combines lectures and practical lab exercises with significant time allocated for hands-on interaction with all user interfaces. Who Should Attend: This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with networking and system administration. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/12/2027 9:00AM - 01/15/2027 3:00PM
  • 32 Hours
  • 1 lesson
  • 468
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
ePolicy Orchestrator Administration (EMEA 5 Day)
Intermediate 4.0

Course Length: 5 days Overview: The Trellix ePolicy Orchestrator – On-prem Administration course from Education Services enables attendees to receive in-depth training on the benefits of the centralized management and deployment of products using ePolicy Orchestrator (ePO) software. Course Highlights: Enabling administrators to fully understand the capabilities of their security solution not only reduces the risks of misconfiguration, but also ensures that an organization gets the maximum protection from installation. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the ePO – On-prem interface. Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with system administration. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/25/2027 9:00AM - 01/29/2027 5:00PM
  • 40 Hours
  • 1 lesson
  • 241
  • Intermediate
Vouchers : 55
Course Guide PDF Add to cart
ePolicy Orchestrator Advanced Topics
Advanced 4.0

Course Length: 4 days Overview: The Trellix ePolicy Orchestrator - On-prem Advanced Topics course from Education Services provides in-depth training on the advanced capabilities of ePolicy Orchestrator (ePO) - On-prem software. Through lecture, hands-on labs, and class discussions, you will learn how to use ePO advanced capabilities and practice using tools for: Upgrades and migrations Monitoring Maintenance and troubleshooting Advanced policy configuration Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with network and system security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/25/2027 9:30AM - 01/28/2027 5:00PM
  • 32 Hours
  • 1 lesson
  • 171
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
EXAM: Application Control Change Control
Professional 4.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Trellix Application Control Change Control Proficiency Exam has been designed for candidates who administer and support Trellix Application Control Change Control and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 164
  • Professional
Thrive Login
Register
EXAM: Data Loss Prevention Endpoint
Professional 3.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Trellix Data Loss Prevention Endpoint Proficiency Exam has been designed for candidates who administer and support Trellix Data Loss Prevention Endpoint and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 432
  • Professional
Thrive Login
Register
EXAM: Database Security
Professional 5.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Trellix Database Security 4.8.7 Proficiency Exam has been designed for candidates who administer and support DBS and have one to three years of experience with this product. This proficiency level allows candidates to demonstrate knowledge in the following key product areas: Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 114
  • Professional
Thrive Login
Register
EXAM: Database Security 10.x Proficiency
Professional 5.0

The Trellix Database Security 10.x Proficiency Exam has been designed for candidates who administer and support DBS and have one to three years of experience with this product. This proficiency level allows candidates to demonstrate knowledge in the following key product areas: Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The maximum time allowed to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 32
  • Professional
Thrive Login
Register
EXAM: Endpoint Detection and Response
Professional 4.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Trellix Endpoint Detection and Response (formerly, MVISION Endpoint Detection and Response) 3.3 Proficiency Exam has been designed for candidates who administer and support Trellix EDR and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: Product Overview Onboarding Dashboards and Interfaces Usability Troubleshooting You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 325
  • Professional
Thrive Login
Register
EXAM: Endpoint Detection and Response with Forensics - SaaS
Professional 3.0

The Trellix Endpoint Detection and Response with Forensics - SaaS (EDRF - SaaS) 50.2 Proficiency Exam has been designed for administrators, analysts, and incident responders who work with and support Trellix EDRF - SaaS. This exam allows candidates to demonstrate knowledge in the following key product areas: Architecture and Fundamentals Incident Response and Remediation Investigations and Forensics Setup and Configuration Threat Detection and Monitoring Threat Hunting Troubleshooting You must score 80% or higher to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 67
  • Professional
Thrive Login
Register
EXAM: Endpoint Security
Professional 0.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Trellix Endpoint Security (formerly, McAfee Endpoint Security) 10.7.1 Proficiency Exam has been designed for candidates who administer and support Trellix ENS and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: Product Overview Installation Migration and Upgrade Threat Prevention Firewall Web Control Adaptive Threat Protection Troubleshooting Client Common Configuration You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 133
  • Professional
Thrive Login
Register
EXAM: ePolicy Orchestrator - On-prem
Professional 4.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Trellix ePO - On-prem 5.10.6 Service Pack 1 Proficiency Exam has been designed for candidates who administer and support Trellix ePO - On-prem and have one to three years of experience with this product. This proficiency level allows candidates to demonstrate knowledge in the following key product areas: Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 440
  • Professional
Thrive Login
Register
EXAM: Helix Proficiency
Professional 0.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Helix Proficiency Exam has been designed for candidates who administer and analyze alerts within the Helix product and have one to three years' experience with this product. This proficiency level allows candidates to demonstrate knowledge in the following key product areas: Intro to Helix Data Sources Custom Dashboards, Reports and Lists You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 31
  • Professional
Thrive Login
Register
EXAM: HX Proficiency
Professional 4.0

ATTENTION: This is currently offered at no cost, but only allows two retakes within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The HX Proficiency Exam has been designed for candidates who administer and analyze alerts within the HX product and have one to three years' experience with this product. This proficiency level allows candidates to demonstrate knowledge in the following key product areas: File System Analysis Event and Alert Management Data Acquisition Techniques Agent Events Alerts You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 47
  • Professional
Thrive Login
Register
EXAM: Intelligent Sandbox
Professional 0.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Trellix Intelligent Sandbox (5.20) Proficiency Exam has been designed for candidates who administer and support Trellix Intelligent Sandbox and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 48
  • Professional
Thrive Login
Register
EXAM: Intelligent Virtual Execution - Proficiency
Professional 5.0

This assessment is designed to validate your knowledge and skills in deploying, managing, and analyzing threats using the IVX platforms. This exam will test your ability to configure the system, interpret analysis reports, and integrate IVX into a broader security architecture. Success will demonstrate your expertise in leveraging this powerful sandbox solution to defend against zero-day exploits and advanced malware. Passing Requirement: You must achieve a score of 80% or better to pass the exam. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 21
  • Professional
Thrive Login
Register
EXAM: Intrusion Prevention System
Professional

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Intrusion Prevention System (NSP) Proficiency Exam has been designed for candidates who administer and support NSP and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: Product Overview Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 185
  • Professional
Thrive Login
Register
EXAM: Policy Auditor
Professional 0.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Policy Auditor 6.5.5 Proficiency Exam has been designed for candidates who administer and support Trellix Policy Auditor (PA) and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 17
  • Professional
Thrive Login
Register
EXAM: SIEM
Professional 3.0

ATTENTION: This is currently offered at no cost, but only allows one retake within 30 days of registration. Once you start the exam, you have 120 minutes to complete it. There is no additional support or restarts provided, so please make preparations to take this exam seriously. Expect the level of difficulty to be considered challenging and not for beginners or new users to the product. The Trellix SIEM 11.3 Proficiency Exam has been designed for candidates who administer and support ESM and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: Installation Configuration Administration Troubleshooting You must achieve a score of 80% or better to pass. The maximum time allowed to take the exam is 120 minutes.

  • 2 Hours
  • 1 lesson
  • 183
  • Professional
Thrive Login
Register
EXAM: Trellix Native Drive Encryption
Professional

The Trellix® Native Drive Encryption 5.2.4 Proficiency Exam tests your understanding of the TNE BitLocker & FileVault encryption capability. It covers core operations, features, components, policies, system administration, actions, reporting, and monitoring using multiple-choice questions.

  • 2 Hours
  • 1 lesson
  • 21
  • Professional
Thrive Login
Register
File and Removable Media Protection - SaaS Essentials: Configuration
Beginner 0.0

The File and Removable Media Protection - SaaS Essentials: Configuration course provides a comprehensive overview of configuring File and Removable Media Protection - SaaS (FRP - SaaS) in your environment, including policies, user accounts, and roles.Course Highlights:FRP - SaaS delivers policy-enforced, automatic, and transparent encryption of removable media such as USB drives.This course is designed as a practical starting point for someone new to configuring FRP - SaaS.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 6
  • Beginner
Thrive Login
Register
File and Removable Media Protection Essentials - Configuration
Beginner 0.0

The File and Removable Media Protection Essentials - Configuration course provides a comprehensive overview of configuring Trellix File and Removable Media Protection Essentials (FRP) 5.4.4 policies, server settings, and permission sets, as well as an overview of mobile and cloud configurations.Course Highlights:FRP delivers policy-enforced, automatic, and transparent encryption of files and folders stored or shared on PCs, file servers, removable media such as USB drives, CDs/DVDs, and ISO files, cloud storage services, and emails.This course is designed as a practical starting point for someone who is new to supporting FRP.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 78
  • Beginner
Thrive Login
Register
File and Removable Media Protection Essentials - Deployment
Beginner 5.0

The File and Removable Media Protection Essentials - Deployment course provides an in-depth overview of the installation and upgrade of Trellix File and Removable Media Protection Essentials (FRP) 5.4.4 in your environment.Course Highlights:FRP delivers policy-enforced, automatic, and transparent encryption of files and folders stored or shared on PCs, file servers, removable media such as USB drives, CDs/DVDs, and ISO files, cloud storage services, and emails.This course is designed as a practical starting point for someone who is new to supporting FRP.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 78
  • Beginner
Thrive Login
Course Guide PDF Register
File and Removable Media Protection Essentials - Introduction
Beginner 5.0

The File and Removable Media Protection Essentials - Introduction course serves as a comprehensive introduction to FRP, covering key features, use cases, product components, and high-level interface orientation.Course Highlights:FRP delivers policy-enforced, automatic, and transparent encryption of files and folders stored or shared on PCs, file servers, removable media such as USB drives, CDs/DVDs, and ISO files, cloud storage services, and emails.This course is designed as a practical starting point for someone who is new to supporting FRP.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 141
  • Beginner
Thrive Login
Register
File and Removable Media Protection Essentials - Management and Troubleshooting
Beginner 0.0

The File and Removable Media Protection Essentials – Management and Troubleshooting course provides a comprehensive overview of Trellix File and Removable Media Protection (FRP) 5.4.4, covering key management, recovery tasks, user actions, and basic troubleshooting guidance.Course Highlights:FRP delivers policy-enforced, automatic, and transparent encryption of files and folders stored or shared on PCs, file servers, removable media such as USB drives, CDs/DVDs, and ISO files, cloud storage services, and emails.This course is designed as a practical starting point for someone who is new to supporting FRP.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 63
  • Beginner
Thrive Login
Course Guide PDF Register
File Protect for System Administrators
Beginner

This entry-level course covers deployment options, basic administration, and core functionality for Trellix File Protect appliances.Who Should AttendNetwork security professionals or incident responders who must set up or work with File Protect appliances.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 53
  • Beginner
Thrive Login
Course Guide PDF Register
Helix Administration
Intermediate 4.0

Course Length: 2 days Overview: This course covers: The Trellix Helix workflow Triaging Helix alerts Creating and scoping cases from an alert Using Helix during an investigation Hands-on activities include configuring data sources, writing TQL searches, as well as analyzing and validating Helix alerts. Who Should Attend: Network security professionals, incident responders, and Trellix administrators and analysts who use Helix to analyze data in noisy event streams. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 16 Hours
  • 163
  • Intermediate
Vouchers : 22
Course Guide PDF Add to cart
Helix Essentials
Beginner 4.0

The Helix Essentials course from Education Services provides an overview of the Trellix Helix, key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration of Helix along with basic troubleshooting guidance.Download PDF Course Description

  • 1 Hour
  • 1 lesson
  • 218
  • Beginner
Thrive Login
Course Guide PDF Register
Intelligent Sandbox Essentials
Beginner 4.0

The Trellix Intelligent Sandbox 5.2 Essentials course from Education Services provides attendees with an overview of Trellix Intelligent Sandbox (TIS), its key features, purpose, and benefits. It also provides a high-level overview of installation and configuration of Trellix Intelligent Sandbox along with basic management and troubleshooting guidance.Download PDF Course Data Sheet

  • 4 Hours
  • 1 lesson
  • 127
  • Beginner
Thrive Login
Course Guide PDF Register
Intelligent Sandbox with DXL and TIE Administration
Intermediate 4.0

Course Length: 4 days Overview: The Trellix Intelligent Sandbox with DXL and TIE Administration course from Education Services provides an in-depth look at each of the products and how they integrate. Course Highlights: In this course, you will learn the tasks crucial to set up, administer, and manage Trellix Intelligent Sandbox (TIS), Data Exchange Layer (DXL), and Threat Intelligence Exchange (TIE) solutions. This combined solution enables you to gain better visibility of your environment, protecting and limiting exposure to threats and vulnerabilities. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the TIS, DXL, and TIE user interfaces, as well as detailed instructions for the integration of this solution. Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with network and system security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 32 Hours
  • 1 lesson
  • 48
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
Intelligent Virtual Execution - Cloud Essentials: Introduction
Beginner 0.0

This entry-level course provides a comprehensive overview of Trellix® Intelligent Virtual Execution - Cloud (IVX - Cloud).This course covers key features such as:File and URL analysisUsing vulnerable guest images for threat detectionAlert managementReport generationAdditionally, learners will explore administration settings, integration capabilities, and a hands-on demo to submit malware samples and analyze reports.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 35
  • Beginner
Thrive Login
Register
Intelligent Virtual Execution - Server Administration
Intermediate 5.0

Course Length: 1 day Overview: This course provides an in-depth look at Trellix Intelligent Virtual Execution (IVX) - Server. In this course, you will learn the tasks crucial to configure, administer, and manage IVX - Server. Course Highlights: You will also learn how to submit malware for analysis and how IVX integrates with other Trellix products, enabling you to gain better visibility of your environment, protecting and limiting exposure to threats and vulnerabilities. This course combines lectures and practical lab exercises with significant time allocated for hands-on interaction with user interfaces. Who Should Attend: This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with system administration. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/26/2027 9:00AM - 01/26/2027 4:00PM
  • 8 Hours
  • 1 lesson
  • 45
  • Intermediate
Vouchers : 11
Course Guide PDF Add to cart
Intelligent Virtual Execution - Server Essentials: Deployment
Beginner 5.0

This entry-level course provides a comprehensive overview on Trellix® Intelligent Virtual Execution - Server (IVX - Server) deployment, including Dynamic Threat Intelligence (DTI) services, upgrading appliances and how to backup and restore appliance databases.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 53
  • Beginner
Thrive Login
Register
Intelligent Virtual Execution - Server Essentials: Introduction
Beginner 0.0

This entry-level course provides a comprehensive overview of Trellix® Intelligent Virtual Execution - Server (IVX - Server). You will learn its key features, benefits, capabilities, its various user interfaces, useful settings, and an overview of IVX clusters.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 68
  • Beginner
Thrive Login
Register
Intelligent Virtual Execution - Server Essentials: Malware Analysis
Beginner 5.0

This entry-level course focuses on the core functionalities of Trellix Intelligent Virtual Execution – Server (IVX – Server). You will understand and configure the IVX analysis engine for malware analysis, submit samples through the Web UI, and interpret alerts and reports to respond to threats.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 58
  • Beginner
Thrive Login
Register
Intrusion Prevention System Administration
Intermediate 4.0

Course Length: 4 days Overview: The Trellix Network Security Platform Administration course from Education Services is an essential component of implementing a successful intrusion prevention strategy. Course Highlights: In hands-on lab sessions, you’ll learn how to deploy and configure a Network Security Platform solution to protect against real-world attacks. You can immediately apply your new skills to improve protection for your business and take full advantage of your investment in our Trellix Network Security Platform. Who Should Attend: System and network administrators, security personnel, auditors, and/or consultants concerned with network and system security. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 32 Hours
  • 1 lesson
  • 288
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
Investigations with Email Security - Cloud
Advanced 5.0

Course Length: 1 day Overview: This course provides an overview of Trellix Email Security – Cloud core functionality and covers administration procedures and alert analysis. Hands-on activities include: Rule/policy creation Alert generation The breakdown and analysis of information found in a Trellix email alert that is used in incident reporting Who Should Attend: This course is intended for analysts (primary) and administrators responsible for the setup and management of Email Security – Cloud and who use Email Security – Cloud to detect, investigate, and prevent cyber threats. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 8 Hours
  • 1 lesson
  • 92
  • Advanced
Vouchers : 74
Course Guide PDF Add to cart
Investigations with Endpoint Security HX
Advanced 4.0

Course Length: 3 days Overview: This course examines how to triage Trellix-generated alerts, derive actionable information from those alerts, and inspect affected endpoints using live analysis and investigation fundamentals. Hands-on activities span the entire analysis and live investigation process, beginning with a Trellix-generated alert, leading to discovery and analysis of the host for evidence of malware and other unwanted intrusion. Endpoint analysis focuses on investigation techniques using features of Endpoint Security (HX), such as: Triage Summary Audit Viewer Acquisitions Who Should Attend: Security analysts, incident responders, and threat hunters who use Endpoint Security (HX) to detect, investigate, and prevent cyber threats. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 01/19/2027 9:00AM - 01/21/2027 4:00PM
  • 24 Hours
  • 1 lesson
  • 646
  • Advanced
Vouchers : 33
Course Guide PDF Add to cart
Malware Analysis Fundamentals
Advanced 4.0

Course Length: 4 days Overview: This entry-level course in malware analysis provides foundational knowledge in: Malware history Safe malware sample handling Analysis methodologies and techniques Sandboxing Triage Countermeasures This course employs open-source tools in hands-on labs to analyze samples including packed executables, cross-platform, Office, PDF, and more. This course is part of the Trellix Cyber Operations team’s Foundations in Incident Response Education (FIRE) track of general defensive security training. Learners are provided a blend of lecture, discussions, and hands-on labs. Who Should Attend: This course is intended for incident responders, information security staff, auditors, SOC analysts, investigators, and consultants responsible for digital forensics and incident response. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 03/01/2027 9:30AM - 03/04/2027 5:00PM
  • 32 Hours
  • 71
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
Native Drive Encryption – SaaS Essentials: Configuration
Beginner 0.0

This comprehensive training program focuses on BitLocker and FileVault management and configuration using TNE - SaaS. You will learn how to manage TNE User Access, Master Keys, and AWS Customer Master Keys, as well as how to deploy TNE clients and configure TNE using AWS Customer Master Keys.Course Highlights:The course also covers Customer Master Key revocation and policy management.By the end of this training, you will have the skills to improve your organization's IT security and compliance.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 26
  • Beginner
Thrive Login
Course Guide PDF Register
Native Drive Encryption On-prem Essentials - Configuration
Beginner 3.0

Throughout this training, you’ll develop expertise in managing and configuring BitLocker & FileVault systems using ePO On-prem, including adding client systems to groups, enabling maintenance mode, configuring product policies, setting up automatic unlock for fixed volumes, registering an LDAP server for preboot user assignments, and provisioning users to use preboot from Windows logon, concluding with a summary of key practices.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 27
  • Beginner
Thrive Login
Course Guide PDF Register
Native Drive Encryption On-Prem Essentials - Deployment
Beginner 4.0

This course will provide a comprehensive overview of the installation process, including deploying the TNE Client package to the client system both via On-prem and manually, as well as removing the TNE Client package from the system. Additionally, it will offer a high-level overview of upgrading TNE to the latest version.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 28
  • Beginner
Thrive Login
Course Guide PDF Register
Native Drive Encryption On-Prem Essentials - Management
Beginner 0.0

Welcome to the Management course of Native Drive Encryption 5.2.4, which is part of the Native Drive Encryption On-Prem Bundle. This course equips you with the knowledge to manage reports and queries and perform system recovery through various recovery methods. The course is divided into modules.Each module includes:An introductionOne or more lessonsDemosA summary of the covered materialThe course concludes with an overview and end-of-course exam.You must score at least 80% on the exam to receive credit for completing the course.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 24
  • Beginner
Thrive Login
Register
Network and Email Administration Bundle (AX, EX, FX, NX, CMS)
Intermediate 4.0

Course Length: 1 day Overview: This course provides a framework for administration and diagnostics, including deployment, configuration and basic administration, of one or more of the following Trellix appliances: Network Security Email Security – Server File Protect Malware Analysis Central Management The course includes checklists, case studies, lab challenges and guidance for transitioning difficult cases to the Trellix Support team. Hands-on activities provide learners with experience administering these appliances and diagnosing common issues. Who Should Attend: System administrators responsible for implementing and maintaining one or more of the following Trellix appliances: Network Security, Email Security – Server, File Protect, Malware Analysis, and Central Management. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 8 Hours
  • 1 lesson
  • 199
  • Intermediate
Vouchers : 11
Course Guide PDF Add to cart
Network Detection and Response (NDR) Administration
Intermediate 5.0

Course Length: 1 day Overview: This course provides an overview of the Network Detection and Response Solution and discusses the NDR console. The course focuses on how NDR can integrate with: Network sensors Packet Capture (PX) Network Security (NX) Intrusion Prevention System (IPS) The course provides an overview of each appliance, their standard network deployments, and how they function within the NDR system. This course also reviews NDR’s integration with other Trellix products like SIEM, ePO, and Tenable Security. It discusses how Trellix NDR with Trellix Wise leverages AI agents to detect and disrupt attacker activity, and accelerate investigation and response. This course combines lectures and practical lab exercises with significant time allocated for hands-on interaction with all user interfaces. Who Should Attend: This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with networking and system administration. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 02/09/2027 9:00AM - 02/09/2027 4:00PM
  • 8 Hours
  • 1 lesson
  • 84
  • Intermediate
Vouchers : 11
Course Guide PDF Add to cart
Network Detection and Response (NDR) Essentials - Deployment
Beginner 5.0

In the Network Detection and Response (NDR) Essentials: Deployment course, participants will gain an understanding of how to deploy Trellix® NDR with Network Investigator (NI) and NDR sensors including Network Security (NX), Packet Capture (PX), and Intrusion Prevention System (IPS). The course covers standard network deployment scenarios with a focus on NDR products and sensors.Download PDF Course Data Sheet

  • 75 Hours
  • 1 lesson
  • 110
  • Beginner
Thrive Login
Course Guide PDF Register
Network Detection and Response (NDR) Essentials - Introduction
Beginner 2.0

In the Network Detection and Response (NDR) Essentials: Introduction course, participants will explore the fundamentals of Trellix NDR, including an introduction to Network Investigator (NI), NDR Detection Engines, and NDR sensors like Trellix Network Security (NX), Packet Capture (PX), and Intrusion Prevention System (IPS). This course highlights key features, functions, and advantages of these products within the Trellix NDR framework.Download PDF Course Data Sheet

  • 75 Hours
  • 1 lesson
  • 132
  • Beginner
Thrive Login
Course Guide PDF Register
Network Detection and Response Analyst course
Advanced 0.0

Course Length: 2 days Overview: This course covers the fundamentals and concepts of Network Traffic Analysis. Course Highlights: It is designed to help Network Analysts learn how to search, filter, analyze, reconstruct, and preserve network traffic, and to apply techniques to conduct a network forensics investigation using the Network Detection and Response (NDR) solution. The course combines lectures and practical lab exercises with significant time allocated for hands-on interaction with all user interfaces. Who Should Attend: Network security professionals and incident responders who use Trellix Packet Capture and Investigation Analysis appliances to analyze cyber threats through packet data. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 02/04/2027 9:00AM - 02/05/2027 3:00PM
  • 16 Hours
  • 1 lesson
  • 17
  • Advanced
Vouchers : 22
Course Guide PDF Add to cart
Network Forensics Administration
Intermediate 5.0

Course Length: 1 day Overview: This entry-level course covers deployment options, basic administration, and configuration of the integrated Trellix technologies for the Trellix Network Forensics appliances—Packet Capture and Investigation Analysis. Hands-on activities include: Post-installation tasks System health checks Pairing a Packet Capture appliance with the Investigation Analysis system Daily system administration tasks Configuring Event Based Capture Integration of another Trellix system for alerts Who Should Attend: Network security professionals and system administrators who operate and administer Trellix Packet Capture and Investigation Analysis appliances and integrate them with other Trellix technologies. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 8 Hours
  • 1 lesson
  • 28
  • Intermediate
Vouchers : 11
Course Guide PDF Add to cart
Network Forensics for System Administrators
Advanced 2.0

This entry-level course covers deployment options, basic administration, and configuration of the integrated Trellix technologies for the Trellix Network Forensics appliances—Trellix Packet Capture and Trellix Investigation Analysis.Who Should Attend:Network security professionals who administer and operate Trellix Packet Capture and Investigation Analysis appliances and integrate them with other Trellix technologies.Download PDF Course Data Sheet

  • 15 Hours
  • 1 lesson
  • 134
  • Advanced
Thrive Login
Course Guide PDF Register
Network Security for System Administrators
3.0

This entry-level online course covers deployment options, basic administration and core functionality for Trellix Network Security appliances.Who Should Attend:Network security professionals, incident responders, and Trellix administrators and analysts who install or manage a Trellix Network Security appliance.Download PDF Course Data Sheet

  • 1 Hour
  • 1 lesson
  • 231
Thrive Login
Course Guide PDF Register
Network Security NX Administration
Intermediate 4.0

Course Length: 1 day Overview: This course provides a framework for administration and diagnostics, including deployment, configuration and basic administration, of Trellix Network Security. The course includes: Checklists Case studies Lab challenges Guidance for transitioning difficult cases to the Trellix Support team Hands-on activities provide learners with experience administering Trellix Network Security and diagnosing common issues. Who Should Attend: System administrators responsible for implementing and maintaining Network Security appliances. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 8 Hours
  • 1 lesson
  • 180
  • Intermediate
Vouchers : 11
Course Guide PDF Add to cart
Policy Auditor Essentials
Beginner 0.0

This is the essentials-level course for the Trellix Policy Auditor (TPA) 6.5.5 product.Course Highlights:This course provides an overview of Trellix Policy Auditor, key features, purpose, and benefits.It also provides a high-level overview of deployment, installation, and configuration of Trellix Policy Auditor along with basic troubleshooting guidance.Download PDF Course Description

  • 4 Hours
  • 1 lesson
  • 113
  • Beginner
Thrive Login
Course Guide PDF Register
Protection for Native Security Essentials
Beginner 0.0

Formerly known as MVISION Endpoint.This course provides an overview of Trellix Protection for Native Security, key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration of Trellix Protection for Native Security along with basic troubleshooting guidance.Course Highlights:The course is divided into lessons.Each lesson is a combination of instructional material, videos, external links.Download PDF Course Data Sheet

  • 2 Hours
  • 1 lesson
  • 42
  • Beginner
Thrive Login
Course Guide PDF Register
SIEM Administration
Intermediate 5.0

Course Length: 4 days Overview: The Trellix SIEM course from Education Services prepares Trellix SIEM engineers and analysts to understand, communicate, and use the features provided by Trellix Enterprise Security Manager. Course Highlights: Trellix SIEM provides near real-time visibility into the activity on all your systems, networks, databases, and applications, enabling you to detect, correlate, and remedy threats in minutes across your entire IT infrastructure. Through hands-on lab exercises, you will learn how to optimize the Trellix Enterprise Security Manager by using Trellix-recommended best practices and methodologies. Who Should Attend: Enterprise Security Manager users responsible for monitoring activity on systems, networks, databases, applications, and for configuration and management of the Enterprise Security Manager. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 32 Hours
  • 1 lesson
  • 110
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
SIEM Advanced Administration
Advanced 4.0

Course Length: 4 days Overview: The Trellix SIEM Advanced course from Education Services prepares Trellix SIEM engineers and analysts to understand, communicate, and use the features provided by Enterprise Security Manager. Course Highlights: Trellix Enterprise Security Manager—the heart of our Security Information and Event Management (SIEM) solution—provides near real-time visibility into the activity on all your systems, networks, databases, and applications, enabling you to detect, correlate, and remedy threats in minutes across your entire IT infrastructure. Through demonstration, explanation, and hands-on lab exercises, you will learn how to utilize the Enterprise Security Manager by using Trellix-recommended best practices and methodologies. Who Should Attend: Enterprise Security Manager users responsible for monitoring activity on systems, networks, databases, applications, and for configuration and management of the Enterprise Security Manager. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 32 Hours
  • 1 lesson
  • 43
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
Skyhigh DSPM: Getting Started
Beginner 0.0

Course Overview: This is a story-driven course designed for security analysts, admins, and deployment partners. Learn to continuously discover, prioritize, and remediate data risks across SaaS, cloud, web, and AI tools like ChatGPT and Microsoft Copilot. Using Data Explorer (Chart and Table Views), you will: Master a repeatable Ask, Filter, Read, Act investigation playbook Interpret Object Risk Scores Track sensitive data movements Link visibility findings directly to Skyhigh SSE policy enforcement controls Download PDF Course Data Sheet

  • 2 Hours
  • 1 lesson
  • 1
  • Beginner
Vouchers : 2
Course Guide PDF Add to cart
Skyhigh Secure Web Gateway (Cloud) Administration - Advanced
Advanced 0.0

This 2-day training covers Secure Web Gateway Cloud Advanced Administration, building on core skills to help administrators strengthen protection, manage platform operations, and deploy advanced features. What You Will Learn: Threat and Data Protection: Mowgli Code, Shadow IT, Remote Browser Isolation (RBI), and DLP Web Policy. Platform Operations: Incidents and Analytics. Advanced Features: Cloud Firewall, Private Access, and Skyhigh Mobile Client. Prerequisite: Participants must have completed the SWG Cloud Basic course. Download PDF Course Data Sheet

  • 16 Hours
  • 1 lesson
  • 2
  • Advanced
Vouchers : 20
Course Guide PDF Add to cart
Skyhigh Secure Web Gateway (Cloud) Administration - Basic
Beginner 0.0

This two-day, hands-on course provides a foundational and practical guide to administering the Secure Web Gateway (SWG) within the Skyhigh Security Service Edge (SSE) platform. It equips administrators with the skills to enhance visibility, limit threat exposure, and use built-in reporting and troubleshooting tools effectively. What You Will Learn: SSE Principles and Architecture: Build a deep understanding of core Security Service Edge concepts and platform architecture. Cloud Connector: Deploy and configure the Cloud Connector for essential integrations such as Active Directory and SIEM. Skyhigh Client Proxy (SCP): Manage SCP to redirect endpoint traffic. Web Policy Configuration: Configure rule sets, including Global Bypass and Global Block. HTTPS Scanning: Implement HTTPS Scanning with proper Certificate Authority (CA) management. Reporting and Troubleshooting: Use built-in tools to monitor activity and resolve issues. Download PDF Course Data Sheet

  • 16 Hours
  • 1 lesson
  • 1
  • Beginner
Vouchers : 20
Course Guide PDF Add to cart
Skyhigh Secure Web Gateway (Cloud) Fundamentals
Beginner 4.0

The Skyhigh Secure Web Gateway for Cloud Fundamentals course is designed to introduce you to the concepts, architecture, user interface, and administration of the Secure Web Gateway (SWG) product. What You Will Learn: Web Policies: How to create web policies. Web Gateway Setup: How to perform web gateway setup in the Skyhigh Security Cloud platform. Traffic and Malware Analysis: How to analyze web traffic and malware. Products and Capabilities Covered: Platform: Skyhigh Security Cloud Platform. Web Security: Secure Web Gateway and Remote Browser Isolation (RBI). Network Security: Cloud Firewall and Private Access (ZTNA). Each of these products and capabilities is integral to the Skyhigh Security Service Edge (SSE) product and security philosophy. Course Format: This eLearning course includes open topic navigation which allows students to move freely between any topics of interest to them at any time. Also, Skill Practice activities are included to help students practice the skills and concepts learned in their own Skyhigh Security environment. Course progress is saved each time a student exits the course, so it does not have to be completed in a set time limit or within one session. Completion of the course is awarded when all topics are reviewed. Important: The course will be updated as new Skyhigh Security Cloud features are added. Check back later to learn more about how to configure and use features in new releases. Download Course Description Datasheet PDF

  • 2 Hours
  • 1 lesson
  • 1045
  • Beginner
Thrive Login
Course Guide PDF Register
Skyhigh Secure Web Gateway (On Prem) Fundamentals
Beginner 4.0

The Skyhigh Secure Web Gateway Fundamentals For On-Premise Appliances course is designed to introduce you to the concepts, architecture, user interface, and administration of the Secure Web Gateway (SWG) product. The course uses a combination of text, graphics, demonstrations, and interactive content that give you detailed instructions for the integration of this product. What You Will Learn: Concepts: The core concepts behind Secure Web Gateway. Architecture: How the SWG product is structured. User Interface: Navigating the SWG user interface. Administration: Administering the SWG product. Course Scope: This course is focused only on the appliance-based version of SWG and does not include SWG administered on the Skyhigh Security Cloud platform. Course Format: This eLearning course includes open topic navigation which allows students to move freely between any topics of interest to them at any time. Course progress is saved each time a student exits the course so it does not have to be completed in a set time limit or within one session. Completion of the course is awarded when all topics are reviewed. Download Course Description Datasheet PDF

  • 2 Hours
  • 1 lesson
  • 935
  • Beginner
Thrive Login
Course Guide PDF Register
Skyhigh Secure Web Gateway Administration for On Premise
Intermediate 4.0

The Skyhigh Secure Web Gateway Administration for On-Premise Appliances course provides an in-depth introduction to the tasks crucial to setting up and administering Secure Web Gateway (SWG) effectively. Course Highlights: Blended Learning: Combines lectures with practical, hands-on lab exercises. Setup and Administration: Covers the essential tasks for configuring and managing SWG. Environment Integration: Provides detailed instructions on integrating SWG with a customer security environment. Course Scope: This course covers only the on-premise appliance version of SWG. SWG on the Skyhigh Security Cloud platform is not covered. Download PDF Course Data Sheet

  • 12/01/2026 9:00AM - 12/04/2026 5:00PM
  • 32 Hours
  • 1 lesson
  • 490
  • Intermediate
Vouchers : 36
Course Guide PDF Add to cart
Skyhigh Secure Web Gateway on Cloud Administration
Intermediate 4.0

The Secure Web Gateway on Cloud Administration course provides in-depth training on Skyhigh Security Cloud and related cloud products. It covers the configuration and administration of critical Security Service Edge (SSE) functions, and walks through the components to help participants identify, define, and apply product features based on use case scenarios. Products and Capabilities Covered: Platform: Skyhigh Security Cloud platform. Web and Network Security: Skyhigh Secure Web Gateway (SWG), Cloud Firewall, and Remote Browser Isolation (RBI). Data Protection: Data Loss Prevention (DLP). Cloud Services: Infrastructure as a Service (IaaS) and Software as a Service (SaaS). Zero Trust: Private Access (ZTNA). Download PDF Course Data Sheet For more information, refer to Skyhigh Security Instructor-Led Training.

  • 32 Hours
  • 1 lesson
  • 166
  • Intermediate
Vouchers : 36
Course Guide PDF Add to cart
Skyhigh Secure Web Gateway On-premise Administration - Advanced
Advanced 5.0

This 2-day advanced course provides in-depth technical training on the Secure Web Gateway On-Premise platform, focusing on sophisticated security configurations and administration. Designed for experienced administrators, it also introduces SWG Cloud and SWG Hybrid concepts to help mitigate modern web-based threats. What You Will Learn: Advanced Security Configuration: HTTPS Scanning, Authentication and Account Management, and Remote Browser Isolation (RBI). Infrastructure Components: Reverse Proxy, ICAP integration, and Central Management for enterprise-scale operations. Threat and Data Protection: Malware scanning and Data Loss Prevention (DLP). Logging and Reporting: Detailed logging using Content Security Reporter. Hands-On Labs: Practical experience through virtual lab exercises. Download PDF Course Data Sheet

  • 12/09/2026 9:00AM - 12/10/2026 5:00PM
  • 1 lesson
  • 18
  • Advanced
Vouchers : 20
Course Guide PDF Add to cart
Skyhigh Secure Web Gateway On-premise Administration - Basic
Beginner 5.0

This 2-day Secure Web Gateway On-Premise hands-on course includes an overview of the solution, along with the planning, installation, and system configuration of the Secure Web Gateway (SWG). What You Will Learn: Policy Construction: GTI, URL Filtering, Malware Scanning, and Media Type Filtering. Access and Encryption: Authentication, Account Management, and HTTPS Scanning. Traffic and User Experience: Web Caching, Next Hop Proxies, and Progress and Block Pages. Administration: Central Management. Monitoring and Troubleshooting: Logging, Dashboards and Reporting, and Basic Troubleshooting. Cloud and Hybrid: SWG Cloud and Hybrid Fundamentals. Download PDF Course Data Sheet

  • 12/07/2026 9:00AM - 12/08/2026 5:00PM
  • 16 Hours
  • 1 lesson
  • 17
  • Beginner
Vouchers : 20
Course Guide PDF Add to cart
Skyhigh Security Cloud Administration
Advanced 4.0

The Skyhigh Security Cloud Administration course provides in-depth training on Skyhigh Security Cloud and related cloud products. This four-day course covers the configuration and administration of critical Skyhigh Security Cloud functions, and walks through the components to help participants identify, define, and refine use cases based on specific scenarios. Products and Capabilities Covered: Platform: Skyhigh Security Cloud platform. Cloud Access and Visibility: Cloud Access Security Broker (CASB) and Shadow IT. Data Protection: Data Loss Prevention (DLP). Cloud Services: Infrastructure as a Service (IaaS) and Software as a Service (SaaS). Cloud Native Protection: Cloud Native Application Platform Protection (CNAPP). Download PDF Course Data Sheet For more information, refer to Skyhigh Security Instructor-Led Training.

  • 11/16/2026 9:00AM - 11/19/2026 5:00PM
  • 32 Hours
  • 1 lesson
  • 186
  • Advanced
Vouchers : 36
Course Guide PDF Add to cart
Skyhigh Security Cloud Administration - Advanced
Advanced 0.0

This 2-day course covers essential topics from foundational cloud concepts to advanced security measures. It gives participants a thorough understanding of both proactive security defenses and reactive incident management within the Skyhigh Security Cloud environment. What You Will Learn: Foundations: Cloud Overview and Classifying Data. Data Protection: Data Leakage Prevention and Data Security Posture Management (DSPM). Access and Visibility: Cloud Access Protection and Analytics. Posture Management: Cloud Security Posture Management (CSPM). Incident Handling: Managing and responding to security incidents. Advanced Topics: A dedicated module on specialized advanced concepts. Download PDF Course Data Sheet

  • 12/16/2026 9:00AM - 12/17/2026 5:00PM
  • 16 Hours
  • 1 lesson
  • Advanced
Vouchers : 20
Course Guide PDF Add to cart
Skyhigh Security Cloud Administration - Basic
Intermediate 0.0

This two-day, hands-on training course is designed to provide students with a foundational understanding of the Skyhigh Security Cloud, with a focus on using the platform's built-in Analytics and Dashboards for effective monitoring and reporting. What You Will Learn: Essential Administration: Navigating the cloud interface, connecting and classifying services, and managing Shadow IT. Data Protection: Data Leakage Prevention. Threat Protection: Anomaly detection, Incident Response, and On-Demand Scans. Monitoring and Reporting: Built-in Analytics and Dashboards. Download PDF Course Data Sheet

  • 12/14/2026 9:00AM - 12/15/2026 5:00PM
  • 16 Hours
  • 1 lesson
  • Intermediate
Vouchers : 20
Course Guide PDF Add to cart
Skyhigh Security Cloud Fundamentals
Beginner 3.0

The Skyhigh Security Cloud Fundamentals course is designed to introduce you to the concepts, architecture, user interface, and administration of Skyhigh Security Cloud and associated products. Products and Capabilities Covered: Platform: Skyhigh Security Cloud Platform. Cloud Access and Visibility: Cloud Access Security Broker (CASB) and Shadow IT. Data Protection: Data Loss Prevention (DLP). Cloud Services: Infrastructure as a Service (IaaS) and Software as a Service (SaaS). Cloud Native Protection: Cloud Native Application Protection Platform (CNAPP). Each of these products and capabilities is integral to the Security Service Edge (SSE) product and security philosophy. Course Format: This eLearning course includes open topic navigation which allows students to move freely between any topics of interest to them at any time. Also, Skill Practice activities are included to help students practice the skills and concepts learned in their own Skyhigh Security environment. Course progress is saved each time a student exits the course. Completion of the course is awarded when all topics are reviewed. Important: The course will be updated as new Skyhigh Security Cloud features are added. Check back later to learn more about how to configure and use features in new releases. Download Course Description Datasheet PDF

  • 2 Hours
  • 1 lesson
  • 902
  • Beginner
Thrive Login
Course Guide PDF Register
Threat Hunting Fundamentals
Intermediate 3.0

Course Length: 4 days Overview: This entry-level course in threat hunting and threat intelligence provides foundational knowledge in threat hunting methodologies and techniques, including the application of information security frameworks and threat intelligence. This course employs open-source tools to perform threat hunting and analysis in hands-on labs, touching on threat hunting use cases, hunting techniques, and key tactics. This course is part of the Trellix Guardians team’s Foundations in Incident Response Education (FIRE) track of general defensive security training. Learners are provided a blend of lecture, discussions, and hands-on labs. Key Learning Objectives: Threat Hunting Fundamentals: Understand foundational threat hunting methodologies, techniques, use cases, and key tactics. Threat Intelligence and Security Frameworks: Understand threat intelligence and the application of information security frameworks. Hands-On Threat Hunting: Use open-source tools to perform threat hunting and analysis through practical lab exercises. Who Should Attend: This course is intended for incident responders, information security staff, auditors, SOC analysts, investigators, and consultants responsible for digital forensics and incident response. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 11/16/2026 9:30AM - 11/19/2026 5:00PM
  • 32 Hours
  • 122
  • Intermediate
Vouchers : 44
Course Guide PDF Add to cart
Threat Intelligence Exchange with Intelligent Virtual Execution Server Administration
Advanced 5.0

Course Length: 4 days Overview: This course provides an in-depth look at each of these Trellix products and how they integrate. In this course, you will learn the tasks crucial to configure, administer, manage, and troubleshoot Intelligent Virtual Execution (IVX), Data Exchange Layer (DXL), and Threat Intelligence Exchange (TIE) solutions. This combined solution enables you to gain better visibility of your environment, protecting and limiting exposure to threats and vulnerabilities. This course combines lectures and practical lab exercises with significant time allocated for hands-on interaction with the IVX, DXL, and TIE user interfaces, as well as detailed instructions for the integration of this solution. Key Learning Objectives: Product Configuration and Administration: Learn the tasks required to configure, administer, and manage Intelligent Virtual Execution (IVX), Data Exchange Layer (DXL), and Threat Intelligence Exchange (TIE) solutions. Troubleshooting: Develop an understanding of how to troubleshoot IVX, DXL, and TIE solutions. Solution Integration: Understand how IVX, DXL, and TIE integrate to provide better visibility into the environment and help protect against threats and vulnerabilities. Hands-On Product Experience: Gain practical experience using the IVX, DXL, and TIE user interfaces through lab exercises and detailed integration instructions. Who Should Attend: This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with system administration. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager. Download PDF Course Data Sheet

  • 32 Hours
  • 1 lesson
  • 24
  • Advanced
Vouchers : 44
Course Guide PDF Add to cart
Trellix Agent Essentials
Beginner 3.0

This course provides an overview of the Trellix Agent (TA) Product, key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration of Trellix Agent along with basic troubleshooting guidance. Download PDF Course Data Sheet

  • 25 Hours
  • 1 lesson
  • 943
  • Beginner
Thrive Login
Course Guide PDF Register
Trellix API Essentials
Beginner 4.0

This course provides attendees with an understanding of how to access and use the Trellix Marketplace, Trellix Developer Portal, and Trellix Application Programming Interface (API).Download PDF Course Data Sheet

  • 2 Hours
  • 1 lesson
  • 581
  • Beginner
Thrive Login
Course Guide PDF Register
Trellix Insights Essentials: Deployment
Beginner 0.0

This course provides a step-by-step practical demonstration of how to deploy Insights and manage user access efficiently across both your ePO - On-prem and SaaS platforms.Download PDF Course Data Sheet

  • 5 Hours
  • 1 lesson
  • 35
  • Beginner
Thrive Login
Register
Trellix Insights Essentials: Introduction
Beginner 0.0

This introductory course provides a practical overview of Trellix Insights, detailing its primary functions, key features, business value, and core components while explaining the system architecture and component functions. Participants will gain the skills to login and navigate the Web Console, interpret the Dashboard for high-level security overviews, understand the Security Posture Score calculation, and identify supported third-party integrations.Download PDF Course Data Sheet

  • 125 Hours
  • 1 lesson
  • 51
  • Beginner
Thrive Login
Course Guide PDF Register
Trellix Insights Essentials: Investigation
Beginner 3.0

This course equips participants with the essential skills to effectively prioritize and respond to threats using Trellix Insights and EDR capabilities, enabling them to use the Campaigns dashboard and “Requiring Attention” list to prioritize threats and understand their global/local impact.Course Highlights:Learners will master the IOCs table, interpret Determinism/Lethality scores, and pivot to Real-Time Search in Trellix EDR for rapid investigation.The course also covers how to analyze affected endpoints, manually resolve events, and leverage Hunting Rules (Yara, Snort, Sigma) for proactive defense, culminating in the ability to identify and reconfigure insufficient endpoint security policies to improve the Security Posture Score (SPS).Download PDF Course Data Sheet

  • 125 Hours
  • 1 lesson
  • 37
  • Beginner
Thrive Login
Course Guide PDF Register
Trellix Intrusion Prevention System Essentials: Introduction
Beginner 4.0

Welcome to the Trellix Intrusion Prevention System Essentials: Introduction course. This course introduces us to Trellix Intrusion Prevention System (IPS) as the Next Generation Intrusion Detection and Prevention System (IDPS).Course Highlights:This course helps the learners understand Trellix IPS key features, its purpose, usage and benefits.This course is packaged with videos, reference links to informative Trellix portals, useful links to related product documentation, and a course exam.Download PDF Course Data Sheet

  • 2 Hours
  • 1 lesson
  • 395
  • Beginner
Thrive Login
Course Guide PDF Register