Trellix NS Series - Connect the Cables for Sensor Fail-Open

•
•
•
Connect the cables for Sensor Fail-Open
The Fail-Open Kits minimize the potential risks of in-line Sensor failure on critical network links. You need to purchase these kits
separately. Both copper and optical versions of the kit are available for the one-gigabit ports. The standard Gigabit Fail-Open Kits
and 10 Gigabit Fail-Open Kits are available for the 1 and 10 gigabit ports respectively.
The Monitoring ports of the Sensors can be fail-close; thus, if the Sensor is deployed in-line fail-close, a hardware failure results
in network downtime. Except the built-in RJ-45 ports which come with built-in fail-open functionality, you use either the optional
Trellix's 4-port 1/10 Gigabit Modular Passive Fail-Open kit or external bypass switch provided in an Active Fail-Open Kit for the
Monitoring ports to fail-open.
While the Sensor is operating, the Active Fail-Open kit is in-line and routes all trac directly through the Sensor. When the Sensor
fails, the switch automatically shifts to a bypass state; in-line trac continues to ow through the network link but is no longer
routed through the Sensor. After the Sensor resumes normal operation, the switch returns to the "on" state, once again enabling
in-line monitoring. The port pairs with Active Fail-Open kits resume inline mode after a Sensor resumes normal operation or is in
good health.
G0 supports passive fail-open mode with RJ-11 port control
G0 also supports active fail-open using a Copper and Fiber 1/10 Gigabit Active Fail-Open kit.
G1 and G2 supports built-in fail-open and active fail-open mode for these interface modules:
4-port 10 GigE/1 GigE LR Optical with internal fail-open
4-port 10 GigE/1 GigE SR Optical 50 micron with internal fail-open
4-port 10 GigE/1 GigE SR Optical 62.5 micron with internal fail-open
4-port RJ-45 10 GigE with internal fail-open
6-port RJ-45 1 GigE with internal fail-open
All RJ-45 ports support active fail-open using only a Copper Active Fail-Open kit.
8-port SFP/SFP+ 1/10 Gigabit
The 8-port module supports active fail-open using a Copper and Fiber 1/10 Gigabit Active Fail-Open kit.
G3 supports both internal fail-open and active fail-open mode when connected to an Active Fail-Open (AFO) kit
| NS7500 Sensor3
Trellix Intrusion Prevention System NS-series Sensor Product Guide
151
Note
Note
Note