DDI offers virtualized deployment with cloud-based sandboxing, enabling easier deployment in virtualized data centers and branch offices. Additional licesne for Deep Discovery Analyzer as a Service is needed.

DDI provides improved threat intelligence sharing and detection via the ability to import third-party malware descriptions.

DDI provides a new "Network Traffic Monitored in the Past 30 Days" widget to help with capacity planning and troubleshooting.

This new widget replace “Monitored Network Traffic” widget.

Deep Discovery Inspector supports the latest hardware appliances in addition to a new 10 GB model.

• DDI provides the ability to define complex exception scenarios via policy based exception handling.
• Detections that match any of the enabled criteria are NOT recorded in the logs.
• Replaced “Host Exceptions” (exceptions for protocol and IP only).

TMSP integration with the replacement of Threat Investigation Center.

Trend Micro Threat Investigation Center is a scalable service that transforms big data into actionable intelligence and provides visualizations and reports.

The Trend Micro Threat Encyclopedia provides comprehensive rule definitions and additional information for every detection rule.

The DDI rules encyclopedia landing page has the latest 500 updated rule list available. Search is supported.

Enhanced Virtual Analyzer

The Virtual Analyzer has been enhanced to include Windows Server 2016 and Windows 10 version 1709 (Fall Creators Update) image support.

Enhanced Deep Discovery Director support

DDI feeds and obtains threat intelligence with Deep Discovery Director new version to provide enhanced threat intelligence sharing and detection.

Import / Export Detection Rule Status Settings

Configuration for Detection Rules under Administration > Monitoring / Scanning > Detection Rules web pages could be exported or imported.