The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Change a monitoring port from SPAN mode to TAP or Inline mode (and vice versa)

Prev Next

You must disable both ports required for port pair operation when changing the operating Mode from single port (SPAN or Hub) Mode to a port pair (Tap or Inline) mode. Device monitoring ports are configured by default to operate in SPAN or Hub mode.

  1. Go to Devices → <Admin Domain Name> → Devices → <Device_Name> → Setup → Physical Ports.

  2. Double-click on the row of the port to be configured. The Monitoring Port Details panel is displayed on the right side.

  3. Select Disabled from the State drop-down list.

  4. Click Save.

  5. Select the peer port (for example, G0/2).

  6. Select Disabled at the State drop-down list.

  7. Select Tap or Inline Fail Open mode as the Mode.

    Note

    To configure from port pair mode to single port mode, select SPAN or Hub as the Mode.

  8. Click Enabled at State.

  9. Configure your port settings (port speed or Trellix certification, duplex, response port usage).

  10. Click Save.

  11. Select port G0/1 to verify the State reads Enabled and the Mode matches your new setting.

  12. Click Save.