Summary
Trend Micro™ XDR collects and correlates deep activity data across multiple vectors - email, endpoints, servers, cloud workloads, and networks. This enables a level of detection and investigation that is difficult or impossible to achieve with SIEM or individual point solutions. With XDR Complimentary Access, you can now add XDR capabilities to 10% of your licensed seats for the length of your contract (e.g. 5,000 Apex One users = 500 free XDR licenses).
This article provides the processes for onboarding and migration to paid license.
Details
Who will receive the XDR promotion?
- Those with valid EPP License which is not expired or still within grace period.
- Americas/Europe customers whose EPP License seat count is >= 100 or AMEA/Japan customer whose EPP License seat count is >=250.
-
Those without Apex One on-premise EDR license (Customers can delete on-premise EDR license from Apex One server and then can see the promotion).
Standalone Trend Micro Endpoint Sensor license is considered as on-premise EDR license but customers may opt to try the Complementary XDR if they remove TMES agent. - Those who have not on-boarded XDR yet
How do I enable Complimentary XDR on Apex One On-Premise?
- Apply Apex One Patch 3 B8358.
- Accept "Enhanced Support Service" here or accept it in a later step.
- The blue bar will appear (controlled by backend)
- BB -> Promotion Window
- XDR Console -> APT -29 Demo (tutorial)
- BB -> XDR Console
- 10% recommended list.
- If "Enhanced Support Service" was not accepted in the previous step, the GUID will be shown ("Enhanced Support Service" is required to proceed).
- Select by hostname
- A pop-up window will show 25 recommended clients every time.
- 10% recommended list.
- BB -> Promotion Window
If I would like to use XDR on more agents, how do I migrate to paid license?
- You need to purchase an XDR Add-on license (SaaS).
- Once this license is active from CLP, you can migrate Apex One On-Premise to Apex One as a Service and enable XDR.
- Use the server migration tool to migrate settings from on-premise to SaaS.
- Move agents from on-premise to SaaS.
- Deploy Apex One policy to target endpoints.
- In the above step, it is also possible to enable Endpoint Sensor from the chosen policy to the agents selected. Free EDR on these agents will be disabled automatically when Apex One enables full mode EDR.
Endpoint Sensor enabled on XDR Inventory App won't be passed to Apex One SaaS (limitation in June release).
- A cross-check on Apex Central console can also be done by using the filters below to know which endpoints have enabled Endpoint Sensor.
