New Changes to Trend Vision One Endpoint Security
Credit Usage Transparency
The credit usage logic in Trend Vision One Endpoint Security has been updated to align with solution packages, eliminating discrepancies between platform-displayed usage and license entitlements. This change improves transparency, prevents unintended charges, and simplifies credit planning.
Credit Requirements for Trend Vision One Endpoint Security
| Package | Credits Required |
|---|---|
| Core | 45 |
| Essentials | 65 |
| Pro | 300 |
| XDR for Endpoints (EDR) | 20 |
| SAP Scanner for Endpoint Security - Pro | 4,800 |
| Sandbox Analysis – Automatic Submission with Trend Vision One Endpoint Security | 7 |
| Data Security for Endpoints | 30 |
The credit app now aligns with Trend Vision One Endpoint Security solution packages:
Pro Features Include
- Integrity Monitoring
- Log Inspection
- Intrusion Prevention for servers
- Recommendation Scan
- Container Protection
Easier Management of Pro Usage
Significant improvements have been implemented to facilitate the management and removal of unexpected Pro usage across endpoints, resulting in a process that is faster, simpler, and more transparent.
Automated Host-Override Settings Cleanup
All host-override settings that can result in Pro usage for Intrusion Prevention System (IPS) will be automatically removed for selected endpoints when you click the "Remove Pro usage for IPS from host override" button under Endpoint Security Policies in the endpoint inventory. This ensures that any configuration leading to unintended Pro usage is addressed in a single step.
One-Click Policy Update for IPS Rules
Users are no longer required to remove individual rules from a policy. When clicking the "Change all advanced rules to Dynamic" button in the Rule status and configuration window, all IPS rules for server applications will be disabled in that policy. This makes it much easier to ensure policies are aligned with your intended usage and licensing.
Endpoint Inventory Efficiency
The latest enhancements to Trend Vision One's credit usage logic bring a more intelligent and transparent approach to endpoint inventory management. By refining how endpoints are counted toward credit consumption, the system now ensures that only active and long-lived agents are included—eliminating noise from duplicates and stale records.
How Endpoints Are Counted
- Active Endpoint: If an agent reports status during the hour of measurement, the endpoint is included in credit usage.
- Inactive Endpoint: If the agent fails to report during the hour and has only recently started reporting (e.g., first report 6 hours ago, last report 3 hours ago), the endpoint is excluded from credit usage.
- Long-Lived Endpoint: Even if no status is reported during the hour, if the agent has a history of activity spanning more than 7 days (e.g., first report 30 days ago, last report 20 days ago), the endpoint is included.
Excluding Long-Lived but Inactive Endpoints
- Manual Removal: Delete endpoints via the Web Console or use the Public API for programmatic cleanup.
- Automated Cleanup: Configure auto-removal settings to purge endpoints inactive beyond a set duration.
Best Practices for Inventory Hygiene
- Regularly audit endpoint inventory to reflect actual usage.
- Enable auto-removal policies to prevent outdated records from inflating credit usage.
- Use API integrations for bulk or automated endpoint management.
Credit Usage Refresh Timing
Agent activity occurring between 8:00 and 9:00 AM is processed and reflected in the Credits & Billing section by approximately 11:00 AM, providing a two-hour buffer to ensure accurate aggregation. The latest endpoint status can be viewed at any time by selecting the Manage Allocation button.
Proactive Guidance for Maintaining Clean Endpoint Inventories
To help users maintain accurate and efficient endpoint inventories, Trend Vision One now provides real-time guidance and automation options that simplify endpoint management and reduce unnecessary credit usage.
Notification Banner
Users will now see the following notification banner when the inactive removal setting for non-persistent endpoints is not enabled and such endpoints are detected in their inventory:
Endpoint Removal Settings in Global Settings
Under Global Settings → Endpoint Settings, users can configure:
- Automatic removal of inactive endpoints.
- Automatic removal of inactive non-persistent endpoints.
These settings allow administrators to define inactivity thresholds (e.g., 30–100 days) for agent disconnection before removal.
Enhanced Inventory Visibility
To support better decision-making, the Endpoint Inventory UI now includes two new columns:
- Cloned Endpoint Type: Displays whether the endpoint is persistent or non-persistent, helping identify short-lived or duplicated records.
- Cloned Agent Configuration: Determines endpoint persistence based on image setup tool input. If the tool isn't used but a clone is detected, “auto-detect” is shown to help confirm proper deployment.
These enhancements empower users to audit and clean up their inventories with greater precision, ensuring that only meaningful, long-lived endpoints contribute to credit usage. Additionally, they provide greater control over usage, improved visibility into billing, and a more streamlined operational experience. Whether managing license allocations or maintaining endpoint data, administrators now have access to the necessary tools and transparency to perform these tasks with increased confidence and efficiency.
For further information or to request a walkthrough of the updated features, please contact Trend Micro Technical Support.