Course Date


Course Rating

1 2 3 4 5


Category


Region Delivered


Product Type


Course Rating
Instructor-Led Courses
Course Length:2 daysOverview:This course provides a framework for administration and day-to-day use of the Trellix Email Security – Server, including deployment, configuration, basic administration, and analysis of malicious emails. Learners will triage Trellix-generated alerts and derive actionable to assess threats to their environment. The course also includes checklists, case studies, and guidance for transitioning difficult cases to the Trellix Support team. Hands-on activities provide learners with experience administering Email Security - Server, diagnosing common issues, and triaging alerts generated from malicious files and URLs in email to identify malware and other unwanted intrusions. Who Should Attend:Security analysts, incident responders, and email administrators responsible for the set up and management of Email Security – Server and who use Email Security – Server to detect, investigate, and prevent cyber threats.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 16
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:This course examines how to triage alerts generated by the Trellix Network Security and Endpoint Security (HX) platforms, derive actionable information from those alerts, and inspect affected endpoints using live analysis and investigation fundamentals.Hands-on activities span the entire analysis and live investigation process, beginning with a Trellix-generated alert, leading to discovery and analysis of the host for evidence of malware and other unwanted intrusion. Endpoint analysis focuses on investigation techniques using features of Endpoint Security (HX), such as the Triage Summary, Audit Viewer, and Acquisitions.Who Should Attend:Security analysts, incident responders, and threat hunters who use Network Security and Endpoint Security (HX) to detect, investigate, and prevent cyber threats..To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
09/09/2025 9:00AM - 09/12/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:3 daysOverview:This course examines how to triage alerts generated by Trellix Network Security, derive actionable information from those alerts, and apply the fundamentals of live analysis and investigation to investigate associated endpoints.Hands-on activities span the entire analysis and live investigation process, beginning with a Trellix-generated alert, leading to discovery and analysis of the host for evidence of malware and other unwanted intrusion. Analysis will be performed using Trellix products and freely available tools.Who Should Attend:Security analysts, incident responders, and network security professionals who use Network Security to detect, investigate, and prevent cyber threats.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/17/2025 9:00AM - 06/19/2025 5:00PM
Credit Hours : 24
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix Application and Change Control Administration course from Education Services provides in- depth training on the tools you need to efficiently install, configure, operate, and troubleshoot issues relating to TACC to safeguard intellectual property and ensure compliance. The course details how this solution uses Trellix ePolicy Orchestrator (Trellix ePO) for centralized management. It also explains how to use Application Control for dynamic allowlisting to ensure that only trusted applications run on devices servers, and desktops and how to use Change Control to monitor and prevent changes to the file system, registry, and user accounts.Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with system securityTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/30/2025 8:00AM - 07/03/2025 5:00PM
Estimated Time : 32 mins
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:2 daysOverview:This course covers the fundamentals of Cyber Threat Hunting; how to build out a hunt program in your own environment; and how to identify, define, and execute a hunt mission. The course introduces the essential concepts for network and endpoint hunting and then allows learners to apply techniques to hunt for anomalous patterns. Hands-on activities follow real-world use cases to identify attacker techniques. Learners leave the course with critical information for establishing hunt programs within their organization, templates that can be used to document hunt missions, and concrete use cases that they can leverage to hunt in their own environment. Data for lab activities has been collected using the following Trellix technologies: Helix, Endpoint Security (HX) and Trellix Network Forensics. Who Should Attend:Security analysts, incident responders, and threat hunters who use Trellix tools to hunt for cyber threats. This is a fast-paced technical course intended for students with some background in incident response, forensic analysis, network traffic analysis, log analysis, security assessments, and/or penetration testing. It is also well suited for those managing incident response or hunt teams. Learners do not need a prior knowledge of specific Trellix technology to benefit from the instruction. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
10/21/2025 9:30AM - 10/22/2025 5:00PM
Credit Hours : 16
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix Data Loss Prevention Endpoint Complete Administration course from Education Services provides in-depth training on the tools you need to design, implement, configure, and use Data Loss Prevention Endpoint Complete to safeguard intellectual property and ensure compliance. The course details how this solution uses Trellix ePolicy Orchestrator (Trellix ePO) software for centralized management. It also explains how to monitor and address risky, day-to-day end-user actions such as emailing, web posting, printing, clipboards, screen captures, device control, uploading to the cloud, and more. Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint securityTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/10/2025 8:00AM - 06/13/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix Data Loss Prevention Network Administration course from Education Services provides in-depth training on the tools you need to design, implement, configure, and use Data Loss Prevention Network to safeguard intellectual property and ensure compliance. The course details how this solution uses Trellix ePolicy Orchestrator (ePO) software for centralized management. It also explains how to monitor and address risky, day-to-day end-user actions such as emailing, web posting, printing, clipboards, screen captures, device control, uploading to the cloud, and more. Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
09/09/2025 9:00AM - 09/12/2025 5:00PM
Estimated Time : 32 mins
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:2 daysOverview:The Trellix Database Security Administration course from Education Services is an essential component to monitor and protect the Database Management System (DBMS). In hands-on lab sessions, you will learn how to deploy and configure a Database Security solution to protect the Database Management System (DBMS) from internal and external threats, as well as intra-database exploits. You can immediately apply your new skills to improve protection for your business and take full advantage of your investment in our Database Security solution.Who Should Attend: system administrators, security personnel, auditors, and/ or consultants concerned with system security.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
10/07/2025 9:30AM - 10/08/2025 5:00PM
Credit Hours : 16
Role :
Instructor-Led Courses
Course Length:4 daysOverview:This entry-level course in digital forensics and incident response provides foundational knowledge in incident response preparation, detection and analysis, containment, eradication, recovery, and post-incident activities, including lessons learned. This course employs open-source tools to perform triage and forensics analysis in hands-on labs, touching on the key artifacts of Microsoft Windows, Linux, and Apple macOS systems.This course is part of the Trellix Cyber Operations team’s Foundations in Incident Response Education (FIRE) track of general defensive security training. Learners are provided a blend of lecture, discussions, and hands-on labs.Who Should Attend:This course is intended for incident responders, information security staff, auditors, SOC analysts, investigators, and consultants responsible for digital forensics and incident response.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
07/15/2025 8:00AM - 07/18/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix Drive Encryption Administration course from Education Services provides an in-depth introduction to the tasks crucial to set up and administer Drive Encryption. Drive Encryption is full disk encryption software that helps protect data on Microsoft Windows tablets, laptops, and desktop PCs to prevent the loss of sensitive data, especially from lost or stolen equipment. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with virtual lab systems, as well as detailed instructions for the integration of this solution.Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security and drive encryptionTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/24/2025 9:00AM - 06/27/2025 5:00PM
Credit Hours : 32
Role :
eLearning Courses
This course bundle provides an in-depth introduction to the tasks required to install, deploy, and manage Trellix Application and Change Control (TACC). Application and Change Control is made up of three components; Application Control, Change Control, and Integrity Monitor. Application Control uses dynamic allowlisting to make sure that only trusted applications run on devices, servers, and desktops. Change Control allows you to monitor and prevent changes to the file system, registry, and user accounts. Integrity Monitor provides real-time monitoring and identifies transient change violations. This course bundle is designed as a practical starting point for someone who is new to supporting TACC.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
Course Rating
eLearning Courses
This entry-level course covers deployment options, basic administration, and core functionality for Trellix Central Management appliances.Who Should AttendNetwork security professionals or incident responders who must set up or work with Central Management appliances.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1
Role :
Course Rating
eLearning Courses
Welcome to Trellix Data Exchange Layer 6.0 Essentials Course. This course provides an overview of the Data Exchange Layer (DXL) Product, key features, purpose, and benefits. It also provides a high-level overview of installation, configuration, management, and basic troubleshooting related to DXL.Download PDF Course Data Sheet
Estimated Time : 120 mins
Credit Hours : 2
Role :
Course Rating
eLearning Courses
Previously known as MVISION Data Loss PreventionThrough e-learning and demonstrations, you will learn about using the tools needed to design, implement, configure, and use Trellix Data Loss Prevention- SaaS to safeguard intellectual property and ensure compliance.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 8
Role :
Course Rating
eLearning Courses
Through e-learning and demonstrations, you will learn about using the tools needed to design, implement, configure, and use Trellix Data Loss Prevention Endpoint Complete to safeguard intellectual property and ensure compliance.Download PDF Course Data Sheet
Estimated Time : 4 mins
Credit Hours : 4
Role :
Course Rating
eLearning Courses
The Trellix Data Loss Prevention Network (NDLP) 11.6 Essentials course provides introduction level training on the tools you need to design, implement, configure, and use Network Data Loss Prevention to safeguard intellectual property and ensure compliance. The course details how this solution uses Trellix ePolicy Orchestrator (Trellix ePO) for centralized management. It also explains how to monitor and address day-to-day protection of email, web, and more. The course is divided into lessons. Each lesson is a combination of instructional material such as texts, videos, external links, knowledge checks, and interactive learning experiences. Please complete each lesson. Also, refer to all the documentation of this product. (Product Guide, Installation Guide, etc.)Download PDF Course Data Sheet
Estimated Time : 8 mins
Credit Hours : 8
Role :
eLearning Courses
This course bundle provides essential-level content and tasks required to install, deploy, and manage Trellix Database Security v10.0. Trellix Database Security finds, evaluates and defends sensitive information in all leading database types. Trellix Database Security is an easy-to-deploy and highly scalable software solution that monitors the Database Management System (DBMS) and protects it from internal and external threats and even intra database exploits.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
Course Rating
eLearning Courses
The Detection & Prevention with Trellix ENS Expert Rules course provides a comprehensive training on the capability of ENS Expert Rules.Through video lectures and interactive activities, you will learn how Expert Rules work, how to create and use them, and how to use and edit AAC-based Expert Rules.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 3
Role :
Course Rating
eLearning Courses
The Drive Encryption Essentials course from Education Services provides attendees with interactive training on the design, setup, configuration, and management of encryption software. In addition, students will understand how to effectively implement the software in a complex enterprise.Download PDF Course Data Sheet
Estimated Time : 2 mins
Credit Hours : 4
Role :
Course Rating
eLearning Courses
This entry-level course provides an overview of the features and detection capabilities of Trellix Email Security - Cloud. It also covers email policy and rule configuration, email quarantine and alert administration.Who Should AttendSecurity analysts and administrators responsible for the set up and management of Email Security - Cloud.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1
Role :
Course Rating
eLearning Courses
This entry-level online course covers deployment options, basic administration and core functionality for Trellix Email Security - Server appliances.Who Should AttendNetwork security professionals, incident responders and Trellix administrators and analysts who must set up or work with a Trellix Email Security appliance.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1
Role :
Course Rating
eLearning Courses
The Trellix EDR Essentials course from Education Services provides instruction on the design, setup, configuration, and management of this application. In addition, students will learn how to effectively leverage Trellix EDR in their environment. This course is roughly four hours in length.Download PDF Course Data Sheet
Estimated Time : 4 mins
Credit Hours : 4
Role :
Course Rating
eLearning Courses
This course provides an introduction to Trellix Endpoint Security (HX). Trellix Endpoint Security (HX) performs fast, targeted forensic investigations across thousands of endpoints. It prevents cyber-attacks on the endpoint, detects malware and other signs of compromise, and allows customers to respond to endpoint security incidents faster.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1
Role :
eLearning Courses
This course bundle provides an in-depth introduction to the tasks required to install,deploy, and manage Trellix Endpoint Security (ENS). Endpoint Security combines the Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control modules to take immediate action against potentially dangerous applications, downloads, websites, and files. This course bundle is designed as a practical starting point for someone who is new to supporting Endpoint Security.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
eLearning Courses
This course bundle provides an in-depth introduction to the tasks required to install,deploy, and manage Trellix Endpoint Security (ENS). Endpoint Security combines the Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control modules to take immediate action against potentially dangerous applications, downloads, websites, and files. This course bundle is designed as a practical starting point for someone who is new to supporting Endpoint Security.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
Course Rating
eLearning Courses
This entry-level course covers core functionalityof Trellix Endpoint Security (HX), including features, operational workflows, alert analysis, and containment.Who Should AttendAnalysts and Incident Responders who use Trellix Endpoint Security (HX).Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 2.5
Role :
Course Rating
eLearning Courses
This entry-level course covers deployment options, basic administration and core functionality for Trellix Endpoint Security (HX).Who Should AttendSystem Administrators and security professionals who must set up and work with Trellix Endpoint Security (HX).Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 2.5
Role :
eLearning Courses
Trellix Enterprise Security Manager (ESM provides near real-timevisibility into the activity on all your systems, networks, databases, andapplications. This enables you to detect, correlate, and remedy threatsin minutes across your entire IT infrastructure. This course preparesTrellix SIEM engineers and analysts to understand, communicate,and use the features provided by Trellix Enterprise Security Manager.Through hands-on lab exercises, you will learn how to deploy,configure, and administer the Trellix SIEM solution.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
eLearning Courses
Trellix Enterprise Security Manager (ESM provides near real-timevisibility into the activity on all your systems, networks, databases, andapplications. This enables you to detect, correlate, and remedy threatsin minutes across your entire IT infrastructure. This course preparesTrellix SIEM engineers and analysts to understand, communicate,and use the features provided by Trellix Enterprise Security Manager.Through hands-on lab exercises, you will learn how to deploy,configure, and administer the Trellix SIEM solution.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
Course Rating
eLearning Courses
This course provides an overview of the ePolicy Orchestrator (ePO) Product, key features, purpose, and benefits. You will also learn how to install, configure, operate, and troubleshoot issues relating to ePO.Download PDF Course Data Sheet
Estimated Time : 6 mins
Credit Hours : 6
Role :
eLearning Courses
This course bundle provides attendees with training on the tools needed to efficiently install, configure, and operate Trellix ePolicy Orchestrator (ePO) – SaaS.This course bundle is designed as a practical starting point for someone new to a working with ePolicy Orchestrator - SaaS. This course is a combination of instructional media, videos, external links, and a course exam.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
eLearning Courses
This course bundle provides attendees with training on the tools needed to efficiently install, configure, and operate Trellix ePolicy Orchestrator (ePO) – SaaS.This course bundle is designed as a practical starting point for someone new to a working with ePolicy Orchestrator - SaaS. This course is a combination of instructional media, videos, external links, and a course exam.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
eLearning Courses
This course bundle provides an in-depth introduction to File and Removable Media Protection (FRP), tasks required to install, deploy, configure, and manage FRP, and basic troubleshooting guidance and tips.FRP delivers policy-enforced, automatic, and transparent encryption of files and folders stored or shared on PCs, file servers, removable media such as USB drives, CDs/DVDs, and ISO files, cloud storage services, and emails. This course bundle is designed as a practical starting point for someone new to supporting FRP.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
eLearning Courses
This entry-level course covers deployment options, basic administration, and core functionality for Trellix File Protect appliances.Who Should AttendNetwork security professionals or incident responders who must set up or work with File Protect appliances.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1
Role :
Course Rating
eLearning Courses
The Helix Essentials course from Education Services provides an overview of the Trellix Helix, key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration of Helix along with basic troubleshooting guidance.Download PDF Course Description
Estimated Time :
Credit Hours : 1
Role :
Course Rating
eLearning Courses
Formally known as MVISION InsightsThe Trellix Insights Essentials course provides instruction on the design, setup, configuration, and management of this application. In addition, students will learn how to effectively leverage Trellix Insights in their environment. The course is divided into lessons and a final exam. Each lesson is a combination of instructional material such as texts, videos, audios, external links, knowledge checks, and interactive learning experiences.Download PDF Course Data Sheet
Estimated Time : 3 mins
Credit Hours : 3
Role :
Course Rating
eLearning Courses
The Trellix Intelligent Sandbox 5.2 Essentials course from Education Services provides attendees with an overview of Trellix Intelligent Sandbox (TIS), its key features, purpose, and benefits. It also provides a high-level overview of installation and configuration of Trellix Intelligent Sandbox along with basic management and troubleshooting guidance.Download PDF Course Data Sheet
Estimated Time : 3 mins
Credit Hours : 4
Role :
Course Rating
eLearning Courses
Formerly known as Network Security Platform (NSP) 10.1 Essentials.The purpose of this course is to introduce the basic uses, architecture, configuration, maintenance and troubleshooting techniques available.Download PDF Course Datasheet
Estimated Time : 6 mins
Credit Hours : 6
Role :
Course Rating
eLearning Courses
Welcome to Trellix Intrusion Prevention System Essentials: Introduction course. This course introduces us to Trellix Intrusion Prevention System (IPS) as the Next Generation Intrusion Detection and Prevention System (IDPS). This course helps the learners understand, Trellix IPS key features, its purpose, usage and benefits. This course is packaged with videos, reference links to informative Trellix portals, useful links to related product documentation, and a course exam.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1
Role :
Course Rating
eLearning Courses
This entry-level course covers deployment options, basic administration, and core functionality for Trellix Malware Analysis appliances.Who Should AttendNetwork security professionals or incident responders who must set up or work with Malware Analysis appliances.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1
Role :
Course Rating
eLearning Courses
This course will provide a background in interface and functions of Management for Optimized Virtual Environments AntiVirus (MOVE AntiVirus). Topics covered in this course include general information about the product, setup and configuration, rules and policies used in MOVE AntiVirus, and some troubleshooting tips for the product.Download PDF Course Data Sheet
Estimated Time : 3 mins
Credit Hours : 3
Role :
eLearning Courses
This course provides information on basic features, installation, configuration, maintenance, and Management of Native Encryption(MNE – SaaS) software. In addition, it explains how to effectively implement the software in a complex enterprise setup.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
eLearning Courses
Centralize management of Microsoft BitLocker and Apple FileVault to protect laptops and desktop computers with Trellix® Native Drive Encryption. Enhance security by collecting and managing encryption keys and enabling pin features on devices. Make administration easy with automatic detection for either Windows or macOS operating systems. Get reporting across your environment that supports compliance objectives and ensures that you know if your devices are protected in the event of loss or theft. This course provides information on basic features, installation, configuration, maintenance of Native Drive Encryption (TNE On-prem) software. In addition, it explains how to effectively implement the software in a complex enterprise setup.Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
Course Rating
eLearning Courses
In the Network Detection and Response (NDR) Essentials: Deployment course, participants will gain an understanding of how to deploy Trellix® NDR with Network Investigator (NI) and NDR sensors including Network Security (NX), Packet Capture (PX), and Intrusion Prevention System (IPS). The course covers standard network deployment scenarios with a focus on NDR products and sensors.<div><span style="color: inherit;"><br></span></div><div><span style="color: inherit;"><a href="https://www.trellix.com/assets/course-descriptions/cd-ndr-essentials-deployment-elt.pdf" target="_blank">Download PDF Course Data Sheet</a></span></div>
Estimated Time :
Credit Hours : 0.75
Role :
Course Rating
eLearning Courses
In the Network Detection and Response (NDR) Essentials: Introduction course, participants will explore the fundamentals of Trellix NDR, including an introduction to Network Investigator (NI), NDR Detection Engines, and NDR sensors like Trellix Network Security (NX), Packet Capture (PX), and Intrusion Prevention System (IPS). This course highlights key features, functions, and advantages of these products within the Trellix NDR framework.<div><span style="color: inherit;"><br></span></div><div><span style="color: inherit;"><a href="https://www.trellix.com/assets/course-descriptions/cd-ndr-essentials-introduction-elt.pdf" target="_blank">Download PDF Course Data Sheet</a></span></div>
Estimated Time :
Credit Hours : 0.75
Role :
Course Rating
eLearning Courses
This entry-level course covers deployment options, basic administration, and configuration of the integrated Trellix technologies for the Trellix Network Forensics appliances—Trellix Packet Capture and Trellix Investigation Analysis.Who Should AttendNetwork security professionals who administer and operate Trellix Packet Capture and Investigation Analysis appliances and integrate them with other Trellix technologies.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1.5
Role :
Course Rating
eLearning Courses
This entry-level online course covers deployment options, basic administration and core functionality for Trellix Network Security appliances.Who Should AttendNetwork security professionals, incident responders and Trellix administrators and analysts who install or manage a Trellix Network Security appliance.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 1
Role :
Course Rating
eLearning Courses
This is the essentials-level course for the Trellix Policy Auditor (TPA) 6.5.5 product. This course provides an overview of Trellix Policy Auditor, key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration of Trellix Policy Auditor along with basic troubleshooting guidance.Download PDF Course Description
Estimated Time :
Credit Hours : 4
Role :
Course Rating
eLearning Courses
Formally known as MVISION EndpointThis course provides an overview of Trellix Protection for Native Security, key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration of Trellix Protection for Native Security along with basic troubleshooting guidance.The course is divided into lessons. Each lesson is a combination of instructional material, videos, external links.Download PDF Course Data Sheet
Estimated Time : 3 mins
Credit Hours : 2
Role :
Course Rating
Skyhigh Courses
The Skyhigh Secure Web Gateway for Cloud Fundamentals course is designed to introduce you to the concepts, architecture, user interface, and administration of the Secure Web Gateway (SWG) product. You will learn how to create web policies, how to perform web gateway setup in the Skyhigh Security Cloud platform, and how to analyze web traffic and malware. Skyhigh Security products and capabilities explained in this course include the Skyhigh Security Cloud Platform, Secure Web Gateway, Remote Browser Isolation (RBI), Cloud Firewall, and Private Access (ZTNA). Each of these products and capabilities are integral to the Skyhigh Security Service Edge (SSE) product and security philosophy.This eLearning course includes open topic navigation which allows students to move freely between any topics of interest to them at any time. Also, Skill Practice activities are included to help students practice the skills and concepts learned in their own Skyhigh Security environment. Course progress is saved each time a student exits the course, so it does not have to be completed in a set time limit or within one session. Completion of the course is awarded when all topics are reviewed.IMPORTANT: The course will be updated as new Skyhigh Security Cloud features are added. Check back later to learn more about how to configure and use features in new releases.Download Course Description Datasheet PDF
Estimated Time :
Credit Hours : 2
Role :
Course Rating
Skyhigh Courses
The Skyhigh Secure Web Gateway Fundamentals For On Premise Appliances course is designed to introduce you to the concepts, architecture, user interface, and administration of the Secure Web Gateway (SWG) product. This course is focused only on the appliance-based version of SWG and does not include SWG administered on the Skyhigh Security Cloud platform. The course uses a combination of text, graphics, demonstrations, and interactive content that give you detailed instructions for the integration of this product.This eLearning course includes open topic navigation which allows students to move freely between any topics of interest to them at any time. Course progress is saved each time a student exits the course so it does not have to be completed in a set time limit or within one session. Completion of the course is awarded when all topics are reviewed.Download Course Description Datasheet PDF
Estimated Time :
Credit Hours : 2
Role :
Course Rating
eLearning Courses
Formally known as McAfee Security for Microsoft ExchangeThis course provides an overview of Trellix Security for Microsoft Exchange, its key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration along with basic troubleshooting guidance.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 6
Role :
Course Rating
Skyhigh Courses
The Skyhigh Security Cloud Fundamentals course is designed to introduce you to the concepts, architecture, user interface, and administration of Skyhigh Security Cloud and associated products. Skyhigh Security products and capabilities explained in this course include the Skyhigh Security Cloud Platform, Cloud Access Security Broker (CASB), Data Loss Prevention (DLP), Infrastructure as a Service (IAAS), Software as a Service (SAAS), Shadow IT, and Cloud Native Application Protection Platform (CNAPP). Each of these products and capabilities are integral to the Security Service Edge (SSE) product and security philosophy.This eLearning course includes open topic navigation which allows students to move freely between any topics of interest to them at any time. Also, Skill Practice activities are included to help students practice the skills and concepts learned in their own Skyhigh Security environment. Course progress is saved each time a student exits the course. Completion of the course is awarded when all topics are reviewed.IMPORTANT: The course will be updated as new Skyhigh Security Cloud features are added. Check back later to learn more about how to configure and use features in new releases.Download Course Description Datasheet PDF
Estimated Time :
Credit Hours : 5
Role :
eLearning Courses
This course provides information on the tools needed to efficiently install,configure, operate, and troubleshoot issues relating to Trellix ThreatIntelligence Exchange (TIE).Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
eLearning Courses
This course provides information on the tools needed to efficiently install,configure, operate, and troubleshoot issues relating to Trellix ThreatIntelligence Exchange (TIE).Download PDF Course Data Sheet
Estimated Time :
Credit Hours :
Role :
Course Rating
eLearning Courses
Formally known as TIE for MVISION ePOThe Threat Intelligence Exchange in Trellix ePO - SaaS Essentials course from Education Services provides attendees with training on the functionality, key features, installation, configuration, and use of TIE in Trellix ePO - SaaS..Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 2
Role :
Course Rating
eLearning Courses
This course provides an overview of the Trellix Agent(TA) Product, key features, purpose, and benefits. It also provides a high-level overview of deployment, installation, and configuration of Trellix Agent along with basic troubleshooting guidance.Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 4
Role :
Course Rating
eLearning Courses
This course provides attendees with an understanding of how to access and use the Trellix Marketplace, Trellix Developer Portal, and Trellix Application Programming Interface (API).Download PDF Course Data Sheet
Estimated Time :
Credit Hours : 2
Role :
Course Rating
eLearning Courses
Formally known as vNSP for AzureWelcome to Trellix Virtual Intrusion Prevention System for Azure Essentials Course. This course provides an overview of the Trellix Virtual Intrusion Prevention System for Azure Product, key features, purpose, and benefits. It also provides a high-level overview of the deployment, installation, and configuration of Trellix Virtual Intrusion Prevention System for Azure along with basic troubleshooting guidance.Download PDF Course Data Sheet
Estimated Time : 35 mins
Credit Hours : 3.5
Role :
Course Rating
Instructor-Led Courses
Course Length:2 daysOverview:The Trellix Endpoint Detection and Response Administration course from Education Services prepares SOC Analysts to understand, communicate, and use the features provided by Endpoint Detection and Response (EDR). Trellix EDR helps to manage the high volume of alerts, empowering analysts of all skill levels to do more and investigate more effectively. Through hands-on lab exercises, you will learn how to detect advanced device threats, fully investigate, and quickly respond.Who Should Attend:Analysts and/or Engineers responsible for configuration, management, and monitoring activity on their systems, networks, databases and applications using the EDR solutionTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
07/17/2025 9:00AM - 07/18/2025 5:00PM
Estimated Time : 16 mins
Credit Hours : 16
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix Endpoint Security - SaaS with Trellix ePolicy Orchestrator - SaaS Administration course from Education Services provides an in-depth introduction to the tasks crucial to set up and administer Endpoint Security - SaaS in an ePO - SaaS managed customer environment. Endpoint Security - SaaS leverages and enhances built-in Windows 10 Windows Defender security with advanced protection for Windows 10 and Windows Server 2016 and newer systems. ePO - SaaS is a SaaS-based centralized security management console that enables management of Microsoft Defender along with Trellix security products. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the Endpoint Security - SaaS policies in the ePO - SaaS user interface, as well as detailed instructions for the integration of this solution.Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with administering Endpoint Security - SaaS on ePO - SaaSTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
08/05/2025 9:00AM - 08/08/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix Endpoint Security Administration course from Education Services provides an in-depth introduction to the tasks crucial to set up and administer Endpoint Security.Endpoint Security combines Threat Prevention, Adaptive Threat Protection, Firewall, and Web Control to take immediate action against potentially dangerous applications, downloads, websites, and files. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the Endpoint Security user interface and policies, as well as detailed instructions for the integration of this solution.Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/16/2025 9:30AM - 06/19/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:5 daysOverview:The Trellix ENS Expert Rules Creation course from Education Services provides insights into our proprietary syntaxes and an advanced view into Operating System concepts and references needed to better understand how ENS works. Building on the ENS Platform, ENS-Expert rules allow the advanced ENS administrator to add deeper security to their ENS deployment. This course helps administrators fully comprehend how ENS Expert Rules can provide a more customized and secure environment.Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint securityTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
07/14/2025 1:00PM - 07/18/2025 9:00PM
Credit Hours : 40
Role :
Course Rating
Instructor-Led Courses
Course Length:1 dayOverview:This course provides a framework for administration and diagnostics of the Trellix Endpoint Security (HX) server and the Trellix xAgent. The course introduces deployment, configuration and basic administration for Trellix Endpoint Security (HX), and includes checklists, case studies and guidance for transitioning difficult cases to the Trellix Support team. Optional modules include Trellix core hardware and virtual appliances. Hands-on activities provide learners with experience administering the appliance and diagnosing common issues.Who Should Attend:System administrators responsible for implementing and maintaining the Endpoint Security (HX) server and endpoint agent (xAgent).To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
07/08/2025 9:00AM - 07/08/2025 5:00PM
Credit Hours : 8
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix ePolicy Orchestrator – On-prem Administration course from Education Services enables attendees to receive in-depth training on the benefits of the centralized management and deployment of products using ePolicy Orchestrator (ePO) software. Enabling administrators to fully understand the capabilities of their security solution not only reduces the risks of misconfiguration, but also ensures that an organization gets the maximum protection from installation. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the ePO - On-prem interface.Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with system administration.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/22/2025 9:00AM - 06/25/2025 5:00PM
Estimated Time : 32 mins
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix ePolicy Orchestrator - On-prem Advanced Topics course from Education Services provides in-depth training on the advanced capabilities of ePolicy Orchestrator (ePO) - On-prem software. Through lecture, hands-on labs, and class discussions, you will learn how to use ePO advanced capabilities and practice using tools for upgrades and migrations, monitoring, maintenance and troubleshooting, and advanced policy configuration.Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with network and system securityTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
07/29/2025 9:00AM - 08/01/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Trellix Application Control Change Control Proficiency Exam has been designed for candidates who administer and support Trellix Application Control Change Control and have one to three years of experience with this product. This Exam allows candidates to demonstrate knowledge in the following key product areas: -- Installation- Configuration - Administration   - Troubleshooting.   You must achieve a score of 80% or better to pass.  The approximate time required to take the exam is 120 minutes.
Estimated Time : 120 mins
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Trellix Data Loss Prevention Endpoint Proficiency Exam has been designed for candidates who administer and support Trellix Data Loss Prevention Endpoint and have one to three years of experience with this product. This Exam allows candidates to demonstrate knowledge in the following key product areas: -- Installation  - Configuration  - Administration   - Troubleshooting.   You must achieve a score of 80% or better to pass.  The approximate time required to take the exam is 120 minutes.
Estimated Time : 120 mins
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Trellix Database Security 4.8.7 Proficiency Exam has been designed for candidates who administer and support DBS and have one to three years of experience with this product. This proficiency level allows candidates to demonstrate knowledge in the following key product areas: -- Installation- Configuration- Administration- Troubleshooting.  You must achieve a score of 80% or better to pass.  The approximate time required to take the exam is 120 minutes.
Estimated Time :
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.Trellix Endpoint Detection and Response (formerly, MVISION Endpoint Detection and Response) 3.3 Proficiency Exam has been designed for candidates who administer and support Trellix EDR and have one to three years of experience with this product.  This Exam allows candidates to demonstrate knowledge in the following key product areas:- Product Overview- Onboarding - Dashboards and Interfaces - Usability - Troubleshooting  You must achieve a score of 80% or better to pass.  The approximate time required to take the exam is 120 minutes.
Estimated Time : 120 mins
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.Trellix Endpoint Security (formerly, McAfee Endpoint Security) 10.7.1 Proficiency Exam has been designed for candidates who administer and support Trellix ENS and have one to three years of experience with this product.  This exam allows candidates to demonstrate knowledge in the following key product areas:- Product Overview- Installation- Migration and Upgrade- Threat Prevention- Firewall- Web Control- Adaptive Threat Protection- Troubleshooting- Client Common ConfigurationYou must achieve a score of 80% or better to pass.The approximate time required to take the exam is 120 minutes.
Estimated Time : 120 mins
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Trellix ePO - On-prem 5.10.6 Service Pack 1 Proficiency Exam has been designed for candidates who administer and support Trellix ePO - On-prem and have one to three years of experience with this product. This proficiency level allows candidates to demonstrate knowledge in the following key product areas:-- Installation- Configuration- Administration- Troubleshooting.You must achieve a score of 80% or better to pass.The approximate time required to take the exam is 120 minutes.
Estimated Time :
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Helix Proficiency Exam has been designed for candidates who administer and analyze alerts within the Helix product and have one to three years' experience with this product.This proficiency level allows candidates to demonstrate knowledge in the following key product areas:- Intro to Helix- Data Sources- Custom Dashboards, Reports and ListsYou must achieve a score of 80% or better to pass.The approximate time required to take the exam is 120 minutes.
Estimated Time :
Credit Hours : 0
Role :
Course Rating
Exams
Overview ATTENTION: This is currently offered at no cost, but only allows two retakes with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product. The HX Proficiency Exam has been designed for candidates who administer and analyze alerts within the HX product and have one to three years' experience with this product.This proficiency level allows candidates to demonstrate knowledge in the following key product areas:- File System Analysis - Event and Alert Management - Data Acquisition Techniques - Agent Events - Alerts You must achieve a score of 80% or better to pass. The approximate time required to take the exam is 120 minutes.
Estimated Time :
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Trellix Intelligent Sandbox (5.20) Proficiency Exam has been designed for candidates who administer and support Trellix Intelligent Sandbox and have one to three years of experience with this product. This Exam allows candidates to demonstrate knowledge in the following key product areas: -- Installation- Configuration  - Administration   - Troubleshooting.   You must achieve a score of 80% or better to pass.  The approximate time required to take the exam is 120 minutes.
Estimated Time : 120 mins
Credit Hours : 0
Role :
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Intrusion Prevention System (NSP) Proficiency Exam has been designed for candidates who administer and support NSP and have one to three years of experience with this product. This exam allows candidates to demonstrate knowledge in the following key product areas: - Product Overview- Installation- Configuration- Administration- Troubleshooting.You must achieve a score of 80% or better to pass.The approximate time required to take the exam is 120 minutes.
Estimated Time : 120 mins
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Policy Auditor6.5.5 Proficiency Exam has been designed for candidates who administer and support Trellix Policy Auditor (PA) and have one to three years of experience with this product. This Exam allows candidates to demonstrate knowledge in the following key product areas: -- Installation - Configuration  - Administration   - Troubleshooting.   You must achieve a score of 80% or better to pass.  The approximate time required to take the exam is 120 minutes.
Estimated Time :
Credit Hours : 0
Role :
Course Rating
Exams
ATTENTION: This is currently offered at no cost, but only allows one retake with-in 30 days of registration. Once you start exam you have 120 minutes to complete. There is no additional support or restarts provided so please make preparations to take this exam serious. Expect level of difficulty to be considered challenging and not for beginner or new users to the product.The Trellix SIEM 11.3 Proficiency Exam has been designed for candidates who administer and support ESM and have one to three years of experience with this product. This Exam allows candidates to demonstrate knowledge in the following key product areas:- Installation- Configuration - Administration - Troubleshooting  You must achieve a score of 80% or better to pass.  The maximum time allowed to take the exam is 120minutes.
Estimated Time :
Credit Hours : 0
Role :
Exams
Trellix® Native Drive Encryption 5.2.4 Proficiency Exam tests your understanding of the TNE BitLocker & FileVault encryption capability. It covers core operations, features, components, policies, system administration, actions, reporting, and monitoring using multiple-choice questions.
Estimated Time :
Credit Hours : 0
Role :
Course Rating
Instructor-Led Courses
Course Length:2 daysOverview:This course covers the Trellix Helix workflow, triaging Helix alerts, creating and scoping cases from an alert, and using Helix during an investigation.Hands-on activities include configuring data sources, writing TQL searches, as well as analyzing and validating Helix alerts. Who Should Attend:Network security professionals, incident responders and Trellix administrators and analysts who use Helix to analyze data in noisy event streams. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
07/24/2025 9:00AM - 07/25/2025 5:00PM
Credit Hours : 16
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix Intelligent Sandbox with DXL and TIE Administration course from Education Services provides an in-depth look at each of the products and how they integrate. In this course, you will learn the tasks crucial to set up, administer, and manage Trellix Intelligent Sandbox (TIS), Data Exchange Layer (DXL), and Threat Intelligence Exchange (TIE) solutions. This combined solution enables you to gain better visibility of your environment, protecting and limiting exposure to threats and vulnerabilities. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the TIS, DXL, and TIE user interfaces, as well as detailed instructions for the integration of this solution. Who Should Attend:system and network administrators, security personnel, auditors, and/or consultants concerned with network and system securityTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
07/22/2025 9:00AM - 07/25/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix Network Security Platform Administration course from Education Services is an essential component of implementing a successful intrusion prevention strategy. In hands-on lab sessions, you’ll learn how to deploy and configure a Network Security Platform solution to protect against real-world attacks. You can immediately apply your new skills to improve protection for your business and take full advantage of your investment in our Trellix Network Security Platform. Who Should Attend:system and network administrators, security personnel, auditors, and/ or consultants concerned with network and system securityTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/10/2025 9:00AM - 06/13/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:1 dayOverview:This course provides an overview of Trellix Email Security – Cloud core functionality and covers administration procedures and alert analysis.Hands-on activities include rule/policy creation, alert generation, and the breakdown and analysis of information found in a Trellix email alert that is used in incident reporting.Who Should Attend:This course is intended for analysts (primary) and administrators responsible for the setup and management of Email Security – Cloud and use Email Security – Cloud to detect, investigate, and prevent cyber threats.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 8
Role :
Course Rating
Instructor-Led Courses
Course Length:3 daysOverview:This course examines how to triage Trellix-generated alerts, derive actionable information from those alerts, and inspect affected endpoints using live analysis and investigation fundamentals.Hands-on activities span the entire analysis and live investigation process, beginning with a Trellix-generated alert, leading to discovery and analysis of the host for evidence of malware and other unwanted intrusion. Endpoint analysis focuses on investigation techniques using features of Endpoint Security (HX), such as the Triage Summary, Audit Viewer, and Acquisitions. Who Should Attend:Security analysts, incident responders, and threat hunters who use Endpoint Security (HX) to detect, investigate, and prevent cyber threats.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/11/2025 9:00AM - 06/13/2025 5:00PM
Credit Hours : 24
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:This course covers the XDR workflow, including configuring data sources through extended detection via Trellix Helix, Trellix Network Security, and Trellix Endpoint Security (HX). Learners triage Trellix-generated alerts, derive actionable information from those alerts, and inspect affected endpoints using live analysis and investigation fundamentals.Hands-on activities include writing TQL searches, creating rules, analyzing and validating alerts from Helix, Network Security, and Endpoint Security (HX), deep analysis of endpoint data collections, and response actions through Endpoint Security (HX) such as collecting data from across the enterprise and containing endpoints. Who Should Attend:Security analysts, incident responders, and threat hunters who use Helix, Network Security and Endpoint Security (HX) to detect, investigate, and prevent cyber threats. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
07/29/2025 9:00AM - 08/01/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:This entry-level course in malware analysis provides foundational knowledge in malware history, safe malware sample handling, analysis methodologies and techniques, sandboxing, triage, and countermeasures. This course employs open-source tools in hands-on labs to analyze samples including packed executables, cross-platform, Office, PDF and more.This course is part of the Trellix Cyber Operations team’s Foundations in Incident Response Education (FIRE) track of general defensive security training. Learners are provided a blend of lecture, discussions, and hands-on labs.Who Should Attend:This course is intended for incident responders, information security staff, auditors, SOC analysts, investigators, and consultants responsible for digital forensics and incident response.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
09/09/2025 8:00AM - 09/12/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:1 dayOverview:This course provides a framework for administration and diagnostics, including deployment, configuration and basic administration, of one or more of the following Trellix appliances: Network Security, Email Security - Server, File Protect, Malware Analysis, and Central Management.The course includes checklists, case studies, lab challenges and guidance for transitioning difficult cases to the Trellix Support team.Hands-on activities provide learners with experience administering these appliances and diagnosing common issues. Who Should Attend:System administrators responsible for implementing and maintaining one or more of the following Trellix appliances: Network Security, Email Security - Server, File Protect, Malware Analysis, and Central Management. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 8
Role :
Course Rating
Instructor-Led Courses
Course Length:1 dayOverview:This one-day hands-on course focuses on configuring and administering NDR systems, specifically Network Investigator and Packet Capture. Participants will engage in practical labs to integrate existing Trellix sensors, such as Network Security and Intrusion Prevention System, into the NDR environment. The course provides an overview of each appliance, their standard network deployments, and how they function within the NDR system alongside the sensors.Lab exercises are included in this course.Who Should Attend:Network security professionals who administer and operate Trellix Network Investigator and Packet Capture and integrate Intrusion Prevention System, and Network Security as NDR sensors along with other Trellix technologies.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 8
Role :
Course Rating
Instructor-Led Courses
Course Length:1 dayOverview:This entry-level course covers deployment options, basic administration, and configuration of the integrated Trellix technologies for the Trellix Network Forensics appliances—Packet Capture and Investigation Analysis. Hands-on activities include post-installation tasks, system health checks, pairing a Packet Capture appliance with the Investigation Analysis system, daily system administration tasks, configuring Event Based Capture, and integration of another Trellix system for alerts.Who Should Attend:Network security professionals and system administrators who operate and administer Trellix Packet Capture and Investigation Analysis appliances and integrate them with other Trellix technologies.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 8
Role :
Course Rating
Instructor-Led Courses
Course Length:1 dayOverview:This course provides a framework for administration and diagnostics, including deployment, configuration and basic administration, of Trellix Network Security. The course includes checklists, case studies, lab challenges and guidance for transitioning difficult cases to the Trellix Support team.Hands-on activities provide learners with experience administering Trellix Network Security and diagnosing common issues. Who Should Attend:System administrators responsible for implementing and maintaining Network Security appliances. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
06/16/2025 9:00AM - 06/16/2025 5:00PM
Credit Hours : 8
Role :
Course Rating
Instructor-Led Courses
Course Length:2 daysOverview:This course covers the fundamentals and concepts of network traffic analysis—how to search, filter, analyze, reconstruct, and preserve network traffic; and how to apply techniques learned to conduct a network forensics investigation utilizing the Trellix Network Forensics solution.Hands-on activities include building an analysis dashboard, executing queries, filtering results, and reconstructing network traffic. Learners will triage an alert and identify anomalies in network traffic to uncover and document indicators of compromise (IOCs) that build a case for a real-world advanced threat. Who Should Attend:Security analysts, incident responders and threat hunters who use Packet Capture and Investigation Analysis appliances to detect, investigate, and analyze cyber threats through packet data. To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 16
Role :
Course Rating
Skyhigh Courses
The Skyhigh Secure Web Gateway Administration for On Premise Appliances course from Skyhigh Security provides an in-depth introduction to the tasks crucial to setting up and administering Secure Web Gateway (SWG) effectively. The course combines lectures and practical hands on lab exercises. It provides details instructions on the integration of this product with a customer security environment. This course covers only the on premise appliance version of SWG. SWG on the Skyhigh Security Cloud platform is not covered.For more information refer to:https://success.myshn.net/Start_Here_with_Skyhigh_Security/Skyhigh_Security_Training/02_Skyhigh_Security_Instructor_Led_Training
06/10/2025 9:00AM - 06/13/2025 5:00PM
Credit Hours : 32
Role :
Course Rating
Skyhigh Courses
TheSecure Web Gateway on Cloud Administration course provides in-depth training on Skyhigh Security Cloud and related cloud products. The course covers on configuration and administration of critical Security Service Edge (SSE) functions. It also walks through the components to help participants identify, define, and apply product features based on use case scenarios. Products and capabilities covered in this course include the Cloud platform, Skyhigh Secure Web Gateway (SWG), Cloud Firewall, Data Loss Prevention (DLP), Infrastructure as A Service (IAAS), Software as a Service (SAAS), Remote Browser Isolation(RBI), and Private Access (ZTNA).For more information refer to:https://success.myshn.net/Start_Here_with_Skyhigh_Security/Skyhigh_Security_Training/02_Skyhigh_Security_Instructor_Led_Training
07/07/2025 9:00AM - 07/10/2025 5:00PM
Credit Hours : 32
Role :
Vouchers : 44
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix SIEM course from Education Services prepares Trellix SIEM engineers and analysts to understand, communicate, and use the features provided by Trellix Enterprise Security Manager. Trellix SIEM provides near real-time visibility into the activity on all your systems, networks, databases, and applications, enabling you to detect, correlate, and remedy threats in minutes across your entire IT infrastructure. Through hands-on lab exercises, you will learn how to optimize the Trellix Enterprise Security Manager by using Trellix-recommended best practices and methodologies.Who Should Attend:Enterprise Security Manager users, responsible for monitoring activity on systems, networks, databases, applications, and for configuration and management of the Enterprise Security Manager To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:The Trellix SIEM Advanced course from Education Services prepares Trellix SIEM engineers and analysts to understand, communicate, and use the features provided by Enterprise Security Manager. Trellix Enterprise Security Manager—the heart of our Security Information and Event Management (SIEM) solution—provides near real-time visibility into the activity on all your systems, networks, databases, and applications, enabling you to detect, correlate, and remedy threats in minutes across your entire IT infrastructure. This course prepares Trellix SIEM engineers and analysts to understand, communicate, and use the features provided by Enterprise Security Manager. Through demonstration, explanation, and hands-on lab exercises, you will learn how to utilize the Enterprise Security Manager by using Trellix-recommended best practices and methodologies. Who Should Attend:Enterprise Security Manager users, responsible for monitoring activity on systems, networks, databases, applications, and for configuration and management of the Enterprise Security ManagerTo learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 32
Role :
Course Rating
Skyhigh Courses
The Skyhigh Security Cloud Administration course provides in-depth training on Skyhigh Security Cloud and related cloud products. This four day course covers on configuration and administration of critical Skyhigh Security Cloud functions. It also walks through the components to help participants identify, define, and refine use cases based on specific scenarios. Products and capabilities covered in this course include the Skyhigh Security Cloud platform, Cloud Access Security Broker (CASB), Data Loss Prevention (DLP), Infrastructure as a Service (IAAS), Software as a Service (SAAS), Shadow IT, and Cloud Native Application Platform Protection (CNAPP).For more information refer to:https://success.myshn.net/Start_Here_with_Skyhigh_Security/Skyhigh_Security_Training/02_Skyhigh_Security_Instructor_Led_Training
07/21/2025 9:00AM - 07/24/2025 5:00PM
Estimated Time : 32 mins
Credit Hours : 32
Role :
Course Rating
Instructor-Led Courses
Course Length:4 daysOverview:This entry-level course in threat hunting and threat intelligence provides foundational knowledge in threat hunting methodologies and techniques, including the application of information security frameworks, and threat intelligence. This course employs open-source tools to perform threat hunting and analysis in hands-on labs, touching on threat hunting use cases, hunting techniques, and key tactics.This course is part of the Trellix Cyber Operations team’s Foundations in Incident Response Education (FIRE) track of general defensive security training. Learners are provided a blend of lecture, discussions, and hands-on labs.Who Should Attend:This course is intended for incident responders, information security staff, auditors, SOC analysts, investigators, and consultants responsible for digital forensics and incident response.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
08/19/2025 8:00AM - 08/22/2025 5:00PM
Credit Hours : 32
Role :
Vouchers : 22
Course Rating
Instructor-Led Courses
Course Length:2 dayOverview:This course is a primer on XDR, covering XDR features, benefits, deployment options, basic administration, and core functionality. Learners will discover the unique strengths of XDR, and understand how XDR enables real-time situational awareness of known and unknown threats. Hands-on activities include searching log events, triaging XDR alerts and investigating security incidents using XDR. Who Should Attend:Network security professionals, incident responders and Trellix administrators and analysts who use XDR to analyze data in noisy event streams.To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.Download PDF Course Data Sheet
Credit Hours : 16
Role :
* CPE policy and requirements can vary among different organizations. Students must self report hours to the respective organization. Hours shown is to give potential CPE hours based on hours of training