Comparison features supported on Windows, Linux, and Macintosh

[vtgt]

Is there an overview available which MVISION EDR features should work on the different operating systems as it is done for ENS with KB85005?

According to KB91345 there are a lot of version dependencies especially for Linux and macOS.

We want to test the EDR client version 3.3.0 on Red Hat 7.9 and have Windows 10 client with EDR 4.0.0 installed.
Are there any restrictions for Linux?
Which features should definitely work in this scenario with the latest On-Prem ePO extensions installed?

Thanks in advance!

[Pravas]

Hi @vtgt ,

Mvision EDR has mainly 3 features.

Trace

Hashing

Network Flow

All of which works for Windows OS. 

For MAC & Linux Trace is unavailable. Please refer the Document below.

https://docs.trellix.com/bundle/mvision-endpoint-detection-and-response-product-guide/page/GUID-4A0B...

Please refer KB91345 for versions compatible with Linux.

Thanks

[vtgt]

Hi @Pravas 

Thanks for your reply!

Do I understand it correctly that I never will see any data from a Linux system in the MVISION EDR Device Search and Historical Search? Only the Real Time Search can be used for Linux systems?

Is a test detection also available for Linux as it is described in KB93745 for Windows systems?

The MVISION EDR installation dependencies for Linux systems is nightmare:

Red Hat 7.9 requires MVISION EDR 3.3 and this version is only supported with McAfee Agent 5.7.3!

You don't really mean that!

[Pravas]

Hi @vtgt ,

Yes, there won't be any trace event generated by Linux Systems on EDR Console.

You may use it for Real-Time Search.

Since Trace feature isn't available for Linux, there isn't a test file at the moment.

Please submit a feature request for Linux in our Ideas Forum. For instructions, refer the link below.

https://kc.mcafee.com/corporate/index?page=content&id=KB60021

Thanks

[Daveb3d]

Ask for a quick roadmap call.  😉