The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Configure 1 Gbps (SFP) Monitoring Ports

Prev Next

You can view or configure settings for the 1 Gbps monitoring ports.

  1. Go to Devices → <Admin Domain Name> → Devices → <Device_Name> → Setup → Physical Ports.

  2. Double-click on the row of numbered 1 Gbps (SFP) port. The Monitoring Port Details window is displayed.

    View Monitoring Port window
    View Monitoring Port window


  3. Select the Auto Negotiate checkbox if the speed of the port has to match with the rest of the network.

  4. Select the Speed(Duplex) of the port. Port speed details the speed of traffic being monitored. You can set the port speed to from the following values on the drop down list:

    • 1 Gbps(full)

    • 100 Mbps(full)

    • 100 Mbps(Half)

    • 10 Mbps(full)

    • 10 Mbps(Half)

  5. Select the State as either Enabled (on) or Disabled (off). The Link displays Up (on) or Down (off) accordingly.

    Note

    If your Link displays as Down and your State is Enabled, there may be a problem. Check the system faults on the Faults tab in Logs page for more information.

  6. Select a Mode from the following:

    Caution

    Your device connections must match the selected operating mode for correct system functionality. Improper deployment may result in system faults, including missed attacks and system failure.

    • Inline Fail Open – Active

    • Inline Fail Open – Passive

    • Inline Fail Closed

      Note

      Inline fail-open and Inline fail-closed are determined by how the port cables are connected. Fail-open operation for GE ports requires use of the optional Bypass Switch provided in the Gigabit Optical Fail-Open Bypass Kit (sold separately). You should not select the Inline Fail Open option if the optional external Bypass Switch is not present.

    • SPAN or Hub

    • Tap

      GE ports can only be configured for External Tap mode.

    If a port is functioning as part of a Port Pair, the Peer Port is listed. For example, if port G2/1 is configured for Tap mode, port G2/2 is listed as the Peer Port. All ports are wire-matched internally with a single peer. For example, G2/1-G2/2 make up a port pair.

  7. Select Placement of your network where the current port is connected: Inside Network or Outside Network. This step applies to Tap or Inline modes only.

  8. Wherever applicable, select a Response Port.The following choices are available:

    • This Port: Respond out of the detection port to the segment. This is selected by default for Inline and SPAN operating modes.

    • R1: Sends responses through a R1 port

    • R2: Sends responses through a R2 port

    Tip

    You can assign a response port to more than one device monitoring port. However, knowing where your response ports are connected in the network will make for the best response system.

  9. Click Save to save changes.

    A confirmation page is displayed. A window is displayed to confirm the changes. Click OK to confirm changes.