Trellix NS Series - Page 72

•
If only node 3 is connected to the server, node 3 will continue to process trac at 25 Gbps throughput. Node 1 will be
active but will not process trac.
Scenario 2: Node failure in a stack with failover
For stacked Sensor failover, heartbeat information is exchanged between the active and standby stack. This information contains
the current capacity of both stacks. The trac is processed by the stack that has the higher capacity. In the event of a node
failure in the active stack, current capacity of the active stack will be less than the standby stack. In this case, the monitoring ports
of the active stack will be deactivated and the trac ows to the standby stack.
Example 1: Single node failure in active stack
In this scenario, the workow is as follows:
1. Node 2 in the active stack is not functional.
2. During the exchange of heartbeat information, the capacity of the active stack is lower than the standby stack.
3. When the active stack processes this information, the monitoring ports in the active stack is deactivated.
4. The standby stack takes over trac inspection from the active stack.
Example 2: Single node failure in active and standby stacks
Trellix Intrusion Prevention System NS-series Sensor Product Guide
| NS9500 Sensors1
72