Point
Product

Account
Compromise

Vulnerability
Detection

Anomaly
Detection

Cloud App
Activity

XDR
Detection

Threat
Detection

ApexOne SaaS (EPP)

Yes

ApexOne SaaS (iES)

Yes

ApexOne OnPremise

Cloud One - Workload Security (Enable Activity Monitoring)

Yes

Yes (Windows)

Yes

Cloud One - Workload Security (Not Enable Activity Monitoring)

Yes

XDR Endpoint Sensor（XES）

Yes

Point Product

Can enable ZTSA module

Comment

No Point Product, only XBC installed

Yes

Apex One SaaS (Windows)

Yes

The Apex One agent should be upgraded to Build 14.0.0.8509 and later.

Apex One SaaS (Mac)

Yes

The Apex One agent should be upgraded to Build 3.5.5208 and later.

Apex One on-prem (Windows)

Yes

Accept "Enhanced Support Service" during Apex One server upgrade, or decline "Enhanced Support Service" during the upgrade and then onboard Trend Micro Vision One from Apex One server console afterwards.
If using Apex One on-prem version, the agent should be upgraded to Build 8378 and later.
If using OfficeScan XG SP1 server, the OfficeScan agent should be upgraded to Build 6029 and later.

Apex One on-prem (Mac)

Apex One for Mac on-prem does not support XBC yet. It is in plan and would be ready soon.

Trend Micro Vision One Endpoint Sensor（XDR)

Yes

Cloud One - Workload Security

Cloud One - Workload Security does not contain XBC by default.

To deploy

Basecamp
(XBC)

Endpoint
Sensor (XES)

Vulnberability
(DVASS)

Security
Access (ZTSA)

Apex One
(XBC + iES)

Cloud One -
Workload Security

Basecamp (XBC) only

Yes

Endpoint Sensor (XES) (w/ XBC)

Already have

Yes

Vulnerability (DVASS) (w/ XBC+xES)

Already have

Yes

Secure Access (ZTSA) (w/ XBC)

Already have

Yes

Apex One (XBC+iES)

Already have

Yes

Cloud One - Workload Security (C1WS)

Yes

Yes (Windows)

Zero Trust Solution Feature Matrix

Product / Version includes:

Trend Vision OneAll , Apex OneAll , Cloud One - Endpoint and Workload SecurityAll

Last updated: 2022/08/24

Solution ID: KA-0012260

Category: Deploy , Install

Summary

This article explains the feature mapping between Trend Micro Endpoint solutions and the Zero Trust Apps.

The Trend Micro Endpoint solutions include:

Apex One On-premise
Apex One SaaS
Cloud One - Workload Security
XDR Endpoint Sensor

The Zero Trust Apps include:

Risk Insights (RI)
Zero Trust Secure Access (ZTSA)

ZTRI and ZTSA are currently on preview stage.

Risk Insights (RI)

Below are risk visibilities we can provide to customers with Apex One, Cloud One - Workload Security, XES.

Point Product	Account Compromise	Vulnerability Detection	Anomaly Detection	Cloud App Activity	XDR Detection	Threat Detection
ApexOne SaaS (EPP)	No	No	No	Yes	No	Yes
ApexOne SaaS (iES)	Yes	No	No	Yes	Yes	Yes
ApexOne OnPremise	No	No	No	No	No	No
Cloud One - Workload Security (Enable Activity Monitoring)	Yes	Yes (Windows)	No	Yes	Yes	Yes
Cloud One - Workload Security (Not Enable Activity Monitoring)	No	No	No	No	No	Yes
XDR Endpoint Sensor（XES）	Yes	Yes	No	Yes	Yes	No

Zero Trust Secure Access (ZTSA)

ZT Secure Access Module is one of the modules that can be deployed with endpoint basecamp (XBC). it is used for traffic forwarding to ZT private access (ZTNA) and Internet access (SWG).

Any endpoints with XBC deployed can enable the ZTSA module on it.

Point Product	Can enable ZTSA module	Comment
No Point Product, only XBC installed	Yes	-
Apex One SaaS (Windows)	Yes	The Apex One agent should be upgraded to Build 14.0.0.8509 and later.
Apex One SaaS (Mac)	Yes	The Apex One agent should be upgraded to Build 3.5.5208 and later.
Apex One on-prem (Windows)	Yes	Accept "Enhanced Support Service" during Apex One server upgrade, or decline "Enhanced Support Service" during the upgrade and then onboard Trend Micro Vision One from Apex One server console afterwards. If using Apex One on-prem version, the agent should be upgraded to Build 8378 and later. If using OfficeScan XG SP1 server, the OfficeScan agent should be upgraded to Build 6029 and later.
Apex One on-prem (Mac)	No	Apex One for Mac on-prem does not support XBC yet. It is in plan and would be ready soon.
Trend Micro Vision One Endpoint Sensor（XDR)	Yes	-
Cloud One - Workload Security	No	Cloud One - Workload Security does not contain XBC by default.

Co-exist capability

Zero Trust Secure Access (ZTSA) module could work without XES. It is a separate module that can be deployed by endpoint basecamp (XBC).
Cloud One - Workload Security can support the Vulnerability feature now

To deploy	Basecamp (XBC)	Endpoint Sensor (XES)	Vulnberability (DVASS)	Security Access (ZTSA)	Apex One (XBC + iES)	Cloud One - Workload Security
Basecamp (XBC) only	-	Yes	No	Yes	Yes	Yes
Endpoint Sensor (XES) (w/ XBC)	Already have	-	Yes	Yes	No	No
Vulnerability (DVASS) (w/ XBC+xES)	Already have	Already have	-	Yes	No	No
Secure Access (ZTSA) (w/ XBC)	Already have	Yes	Yes	-	Yes	Yes
Apex One (XBC+iES)	Already have	No	No	Yes	-	No
Cloud One - Workload Security (C1WS)	Yes	No	Yes (Windows)	No	No	-

Was this article helpful?

Featured

Automation Center

Education Portal

Online Help Center

Service Status

TrendConnect

Zero Trust Solution Feature Matrix

Risk Insights (RI)

Zero Trust Secure Access (ZTSA)

Co-exist capability

Zero Trust Solution Feature Matrix

Product / Version includes:

Summary

Risk Insights (RI)

Zero Trust Secure Access (ZTSA)

Co-exist capability