The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Components of an NS-series Sensor

Prev Next

The Sensor front panel

Correlate the pictures with the information following it to understand the components of an NS-series Sensor.

The NS9100/NS9200 Sensor model

Sensor front panel
Sensor front panel


  1. Console port (1)

  2. QSFP+ 40 Gigabit Ethernet ports (2)

  3. Two slots for I/O modules (Any combination of the interface modules can be used)

    Note

    The supported interface modules need to be purchased separately.

    • QSFP+ 40 Gigabit Ethernet ports (4)

    • QSFP+ 40 Gigabit Ethernet ports (2)

    • SFP/SFP+ 1/10 Gigabit Ethernet Monitoring ports (8)

    • RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (6)

  4. RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (8)

The supported transceiver modules are QSFP+, SFP+ (M2M and SM), SFP Fiber (MM and SM) and SFP Copper.

Sensor rear panel
Sensor rear panel


  1. USB ports (2)

  2. Power supply A (Pwr A)

  3. Power supply B (Pwr B)

  4. RJ-45 100/1000/10000 Management port (Mgmt) (1)

  5. RJ-45 100/1000/10000 Response port (R1) (1)

  6. RJ-45 Auxiliary port (Aux) (1)

The NS9300 Sensor model

Sensor front panel
Sensor front panel


The NS9300 Sensor consists of a Primary Sensor, NS9300P, and a Secondary Sensor, NS9300S.

  1. Console ports on the NS9300P and NS9300S Sensors (2)

  2. QSFP+ 40 Gigabit Ethernet Interconnect ports (4). G0/1 and G0/2 on NS9300P Sensor and G4/1 and G4/2 on NS9300S Sensor.

  3. Four slots for I/O modules (Any combination of the interface modules can be used)

    Note

    The supported interface modules need to be purchased separately.

    • QSFP+ 40 Gigabit Ethernet ports (4)

    • QSFP+ 40 Gigabit Ethernet ports (2)

    • SFP/SFP+ 1/10 Gigabit Ethernet Monitoring ports (8)

    • RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (6)

  4. RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (16)

The supported transceiver modules are QSFP+, SFP+ (MM and SM), SFP Fiber (MM and SM) and SFP Copper.

Sensor rear panel
Sensor rear panel


  1. USB ports (4)

  2. Power supply A (Pwr A)

  3. Power supply B (Pwr B)

  4. RJ‑45 100/1000/10000 Management port (Mgmt) (2). Mgmt on NS9300S Sensor is used as an interconnect port.

  5. RJ‑45 100/1000/10000 Response port (R1) (2). R1 on NS9300P Sensor is used as an interconnect port.

  6. RJ‑45 Auxiliary ports (Aux) (2)

The NS9100 and NS9200 Sensors have seven fan units on the front panel and four fan units on the top.

Fan units-NS9100/NS9200
Fan units-NS9100/NS9200


The NS9300 Sensors have seven fan units each for the primary and secondary Sensors on the front panel, and four fan units each for the primary and secondary Sensors on the top.

The direction of airflow in all the Sensors is front to back. Cold air enters through the front of the chassis.

Fan units-NS9300
Fan units-NS9300


Note

The fan units and power supplies of NS9100, NS9200, and NS9300 are field replaceable and hot swappable.

The following table gives the details of the supported ports.

Ports

NS9100/NS9200

NS9300

Fixed Gigabit Ethernet—Copper Ports

(internal fail-open)

8

16

Fixed 40-Gigabit Ethernet

2

4 (used as interconnect ports between NS9300P and NS9300S )

Network I/O Slots

2

4

Network I/O Modules (four options)

8 port (SFP+/SFP) 10 GigE/1 GigE

6 port RJ-45 10/100/100 Mbps

2 port (QSFP+) 40 GigE

4 port (QSFP+) 40 GigE

8 port (SFP+/SFP) 10 GigE/1 GigE

6 port RJ-45 10/100/100 Mbps

2 port (QSFP+) 40 GigE

4 port (QSFP+) 40 GigE

10 Gigabit Ethernet

Modular up to 16

Modular up to 32

40-Gigabit Ethernet

Modular up to 8

Modular up to 16

10/100/100 Mbps

Modular up to 12

Modular up to 24

Dedicated Response Ports (RJ45)

1 (10G/1G/100M)

1 (10G/1G/100M) on NS9300S

Dedicated Management Ports (RJ45)

1 (10G/1G/100M)

1 (10G/1G/100M) on NS9300P

Dedicated Auxillary Port (RJ45)

1 (10G/1G/100M)

2 (10G/1G/100M)

USB ports

2

4

  • RJ-45 10/100/1000 Management port, which is used for communication with the Manager server. You can assign an IP address to this port during installation. These ports have built-in fail-open function.

  • Console port, which you use to set up and configure the Sensor using the CLI.

  • RJ-45 Auxiliary port, which you might use to dial in remotely to set up and configure the Sensor.

  • QSFP+ 40 Gigabit Ethernet Monitoring ports, which enable you to monitor four SPAN ports, two segments in-line, or a combination.

  • SFP/SFP+ 1/10 Gigabit Ethernet Monitoring ports, which enable you to monitor eight SPAN ports, four segments in-line, or a combination.

  • RJ-45 10/100/1000 Mbps Ethernet Monitoring ports, which enable you to monitor eight SPAN ports, four segments in-line, or a combination.

  • Note

    • These Monitoring interfaces of the NS-series Sensor work in stealth mode, meaning they have no IP address and are not visible on the monitored segment.

    • The gigabit ports of the Sensor running in in-line mode fail-close, meaning that if the Sensor fails, it will interrupt/block data flow. Fail-open functionality requires either the Layer 2 Passthru feature, described in detail in the IPS Administration section of Trellix Intrusion Prevention System Product Guide or the hardware Gigabit Fail-Open Bypass kit for gigabit ports.

    RJ-45 100/1000/10000 Response port, which enables you to inject response packets back through a switch or router when you're operating in SPAN or tap mode.

  • External USB ports. You use this in troubleshooting situations for system recovery purposes. You need to restart the Sensor through the USB storage device.

  • Primary Power Supply-A (included). Power supply A is included with an NS-series Sensor. The supply uses a standard IEC port (IEC320-C13). Trellix provides a standard, 2m NEMA 5-15P (US) power cable (3 wire). International customers must procure a country-appropriate power cable.

  • Power Supply-B (included). Power supply B is a hot-swappable, redundant power supply. This power supply also uses a standard IEC320-C13 port, and you can use the Trellix-provided cable or acquire one that meets your specific needs.

The NS-series Sensor does not have internal taps; you must use it with a third-party external tap to run it in tapped mode.