The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Clustering Intelligent Sandbox Appliances

Prev Next

When you have a very heavy load of files to be analyzed for malicious content, you can cluster two or more Intelligent Sandbox Appliances. So, the analysis load is efficiently balanced between the Intelligent Sandbox Appliances (nodes) in the cluster.

Consider multiple inline Sensors submitting hundreds of files per second to one Intelligent Sandbox Appliance. In the blocking mode, a Sensor waits for up to 6 seconds for Intelligent Sandbox to analyze a file. After this time period, the Sensor forwards the file to the target endpoint. Faster response from Intelligent Sandbox could be accomplished by clustering Intelligent Sandbox Appliances for load-balancing.