Trellix MOVE AntiVirus

Trellix MOVE AntiVirus (Management for Optimized Virtual Environments) is a specialized security solution designed to provide advanced malware protection for virtualized desktops and servers without the performance penalties of traditional antivirus. By offloading virus scanning, configuration, and DAT update operations from individual guest virtual machines (VMs) to a dedicated Offload Scan Server (SVM), the product significantly reduces resource contention and eliminates the risk of 'antivirus storms' that occur when multiple VMs attempt to update or scan simultaneously. This architecture allows organizations to achieve higher VM density per hypervisor, ensuring that security does not compromise the ROI of virtualization projects. The solution offers two primary deployment modes: Multi-platform and Agentless. The Multi-platform option supports all major hypervisors—including VMware, Hyper-V, Citrix, and KVM—using a lightweight client that coordinates with the SVM. The Agentless option is specifically tuned for VMware NSX environments, providing a completely frictionless security layer that requires no software installation on the guest VMs themselves. Managed through the Trellix ePolicy Orchestrator (ePO), the platform provides a unified view of security posture across physical, virtual, and cloud environments, integrating seamlessly with Trellix Threat Intelligence Exchange (TIE) to provide real-time reputation-based protection.

Trellix MOVE AntiVirus distinguishes itself from competitors like Trend Micro Deep Security or VMware Carbon Black through its unique 'Multi-Platform' flexibility and deep integration with the Trellix ePolicy Orchestrator (ePO) management suite. While many virtualization security tools are locked into a single hypervisor, Trellix MOVE provides a consistent security policy framework across VMware, Microsoft Hyper-V, Citrix Hypervisor, and KVM. This makes it the ideal choice for heterogeneous data centers. Its primary competitive edge lies in its 'SVM Autoscaling' capability, which allows the security infrastructure to elastically grow or shrink based on the current workload—a feature many rivals lack, which often leads to either over-provisioning or security bottlenecks during peak usage. Furthermore, Trellix MOVE benefits from the 'Global Cache' and 'Local Cache' hierarchy. Once a file is scanned and confirmed clean on one VM, that result is shared across the entire environment, meaning identical files on other VMs never need to be scanned again, drastically reducing I/O. Its integration with Trellix XDR allows virtual security events to be correlated with network and email threats, providing a level of contextual intelligence that standalone virtualization tools cannot match. Finally, the ability to coexist with Trellix Endpoint Security (ENS) allows organizations to maintain a layered defense strategy, utilizing MOVE for performance-sensitive virtual workloads while leveraging full EDR capabilities for high-risk endpoints, all managed from a single pane of glass.

• Mid-Market
• Enterprise
• Small Businesses (1-99)