What is included in Trend Micro Deep Security Enterprise Perpetual per Server (VM) Corporate?

Anti-Malware with ML – Real-time scanning, behaviour monitoring and predictive machine learning on servers.
Intrusion Prevention – Inspects traffic and virtually patches known vulnerabilities before patch windows.
Firewall and Web Reputation – Host firewall with audit logs, blocks malicious domains and C&C servers.
Integrity and Log Inspection – Tracks unplanned changes and analyses system logs for security events.
Application and Device Control – Locks down servers against unapproved software; removable media control on Windows.
Important – No EDR, patch deployment or encryption; XDR needs Trend Vision One.

What are the main benefits of Trend Micro Deep Security Enterprise Perpetual per Server (VM) Corporate?

Trend Micro Deep Security Enterprise combines the Deep Security protection modules for physical, virtual and cloud servers in one agent, managed centrally from the on-premises Deep Security Manager web console. Since March 2026, Trend Micro's enterprise business operates under the name TrendAI, so current vendor documentation may list the product as TrendAI Deep Security.

Patch window protection – IPS rules shield exposed services until maintenance windows allow patching.
One agent, one policy – Replaces separate antivirus, host firewall and file-integrity tools per server.
Policy inheritance – Parent policies propagate settings; overrides stay possible per server.
Agentless VMware option – Virtual Appliance protects NSX guest VMs without an in-guest agent.
Evidence for audits – Firewall, integrity and log events document what changed and when.
SIEM integration – Forwards events in CEF or LEEF format, optionally over TLS.

Best antivirus? Why Windows Defender alone is not enough
Explains why the protection built into Windows is often not sufficient on its own for business systems.

Which company size is Trend Micro Deep Security Enterprise Perpetual per Server (VM) Corporate suitable for?

Deep Security Enterprise suits organisations that run their own server estate and have staff who can operate a Deep Security Manager together with its database. Medium-sized and large companies with fixed change windows, audited servers or mixed Windows and Linux estates gain the most, because virtual patching and integrity monitoring directly reduce emergency patching and audit effort. A small business with only a few Windows servers and no dedicated administrator often gets less value from the full module set than from a simpler protection product.

Does Trend Micro Deep Security Enterprise Perpetual per Server (VM) Corporate meet the requirements of Swiss cybersecurity legislation?

Since 1 April 2025, the revised Information Security Act obliges operators of critical infrastructure in Switzerland, for example in energy, healthcare or transport, to report cyberattacks to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery. Most private companies outside these sectors are not directly affected, but may receive comparable requirements through contracts with such operators. Deep Security Enterprise supports the factual basis of such a report: intrusion prevention, integrity monitoring and log inspection events record the affected server, the time and the triggered rule, and the Deep Security Manager can forward these events to a SIEM. The product does not detect attacks outside the protected servers, does not provide 24/7 monitoring or incident response, and does not create or submit the report to BACS. This information does not constitute legal advice; for a binding assessment of your obligations, consult a qualified legal professional.

Does Trend Micro Deep Security Enterprise Perpetual per Server (VM) Corporate meet the requirements of European cybersecurity legislation?

The NIS 2 Directive requires essential and important entities in covered sectors to implement cybersecurity risk-management measures, and no single product makes an organisation compliant. These measures include incident handling, business continuity and backup, supply chain security, security in system maintenance including vulnerability handling, access control, cryptography and multi-factor authentication. Deep Security Enterprise supports vulnerability handling through virtual patching and recommendation scans, and incident handling through server event logs and SIEM forwarding. Integrity monitoring and application control additionally support controlled, documented server operation. Backup and recovery, encryption, multi-factor authentication, staff training and supplier assessments are not covered and must be addressed with other measures.

Data loss is expensive: How backups help you avoid outages
Shows why backups remain necessary alongside protection software to keep outages and data loss under control.

Does Trend Micro Deep Security Enterprise Perpetual per Server (VM) Corporate help with security questionnaires from large customers?

Yes, for the server section of a typical questionnaire. Deep Security Enterprise provides documented answers on malware protection for servers, host firewalling, intrusion prevention and shielding of unpatched vulnerabilities, file integrity monitoring, log collection with SIEM export, application allow-listing and role-based central administration. It does not answer questions on endpoint detection and response, 24/7 security monitoring, patch deployment, backup and restore testing, multi-factor authentication, disk encryption or email security, and workstation protection is outside the scope of this server product. For detection and response, the route within the same vendor is to connect Deep Security to Trend Vision One, which is licensed separately. The remaining gaps require dedicated tools or organisational measures such as documented backup tests and access policies.

Which limitations should you know before buying?

Deep Security Enterprise does not deploy operating system or application patches; intrusion prevention only shields known vulnerabilities until you install the patch. Feature coverage differs by platform: Device Control is available only on Windows, and the AIX and Solaris agents support a narrower feature set than Windows and Linux. Legacy systems such as Windows Server 2008, Debian 8 and AIX 6.1 receive only limited support through agent version 20.0.0, with pattern and rule updates ending on 31 December 2026. Agentless protection with the Deep Security Virtual Appliance reaches end of life on 31 December 2027, or earlier if VMware ends support for NSX 4.x before then. XDR analysis in Trend Vision One requires a separate licence, and the Deep Security Manager needs its own server and database that your team has to operate and update.

End of Support for Windows Server 2022: Windows Server 2025 vs. 2022 vs. 2019: Is It Worth Upgrading?
Compares current Windows Server versions and helps you plan upgrades for servers still running older releases.

Frequently asked questions about Trend Micro Deep Security Enterprise Perpetual per Server (VM) Corporate

What is the difference between Deep Security and Trend Cloud One – Endpoint & Workload Security?

Deep Security is software you install and operate yourself, with the Deep Security Manager running in your own environment. Trend Cloud One – Endpoint & Workload Security is the vendor-hosted service that uses the same Deep Security Agent 20, and Trend Micro documents a migration path from Deep Security to it.

Does Deep Security protect Windows Server 2025?

Yes, Deep Security Agent 20 supports Windows Server 2025 (LTSC, version 24H2). Some functions on this platform require an agent update released in April 2025 or later, so older agent builds should be updated before rollout.