---
title: "What you can do with Trellix DLP 8800 hardware add-on components"
slug: "what-you-can-do-with-trellix-dlp-8800-hardware-add-on-components"
tags: ["DLPNP 11.10.x", "Hardware"]
updated: 2026-11-04T16:35:05Z
published: 2026-11-04T16:35:05Z
canonical: "docs.trellix.com/what-you-can-do-with-trellix-dlp-8800-hardware-add-on-components"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# What you can do with Trellix DLP 8800 hardware add-on components

You can expand the capabilities of the Trellix Data Loss Prevention (DLP) 8800 appliance using optional hardware components. These components provide forensic auditing storage, high-speed fiber connectivity, and high availability clustering.

- Forensic Auditing with Trellix DLP Capture Connect a dedicated Trellix Data Loss Prevention (DLP) Capture Storage Array to the appliance RAID controller port using a mini-SAS cable. This connection provides up to 24 TB of storage space. Use this storage space to perform the following tasks: Capture and save historical network traffic. Retrospectively analyze email and web traffic for compliance. Filter stored historical data to refine and tune policies.
- High-Speed Fiber Networking Install an optional fiber Optical Control Plane (OCP) card or Small Form-Factor Pluggable (SFP) Network Interface Card (NIC) into the appliance PCIe riser or OCP slot. Insert Short Range (SR) or Long Range (LR) transceivers into the card. Connect high-speed fiber-optic cables to handle load balancing and management traffic.
- High Availability Clustering Configure the Trellix DLP 8800 appliance as a member of a high availability cluster. The appliance can act as either a primary node or a scanner node. Nodes in the cluster share a single Virtual IP (VIP) address. This configuration delivers the following operational benefits: Distributes heavy web and email traffic loads across available cluster nodes. Provides continuous service availability if a cluster node fails.