The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages expected in early November 2026. We hope you enjoy the updated experience.

Change from internal tap mode to inline fail-closed mode for fast ethernet monitoring ports

Prev Next

The time will come when you want to change from Tap mode to Inline mode in order to start dropping attacking packets. This configuration can be performed without any manual intervention (that is, changing cable connections) if you change from Internal Tap mode to Inline fail-closed mode (for Fast Ethernet monitoring ports only).

Note

The following procedure assumes the present configuration is Internal Tap mode.

Task

  1. Go to Devices → <Admin Domain Name> → Devices → <Device_Name> → Setup → Physical Ports.
  2. Double-click on the row of the monitoring port to be configured (for example, 1A). The Monitoring Port Details panel is displayed on the right side.
  3. Select Inline Fail Closed mode as the Mode.
  4. Configure port settings (port speed or Trellix certification, duplex, response port setting).
  5. Click Save.