The Fail-Open Kits minimize the potential risks of in-line Sensor failure on critical network links. You need to purchase these kits separately. Both copper and optical versions of the kit are available for the one-gigabit ports. The standard Gigabit Fail-Open Kits and 10 Gigabit Fail-Open Kits are available for the 1 and 10 gigabit ports respectively.
The Monitoring ports of the Sensors can be fail-close; thus, if the Sensor is deployed in-line fail-close, a hardware failure results in network downtime. Except the built-in RJ-45 ports which come with built-in fail-open functionality, you use either the optional Trellix's 4-port 1/10 Gigabit Modular Passive Fail-Open kit or external bypass switch provided in an Active Fail-Open Kit for the Monitoring ports to fail-open.
While the Sensor is operating, the Active Fail-Open kit is in-line and routes all traffic directly through the Sensor. When the Sensor fails, the switch automatically shifts to a bypass state; in-line traffic continues to flow through the network link but is no longer routed through the Sensor. After the Sensor resumes normal operation, the switch returns to the "on" state, once again enabling in-line monitoring. The port pairs with Active Fail-Open kits resume inline mode after a Sensor resumes normal operation or is in good health.
G0 supports passive fail-open mode with RJ-11 port control
Note
G0 also supports active fail-open using a Copper and Fiber 1/10 Gigabit Active Fail-Open kit.
G1 and G2 supports built-in fail-open and active fail-open mode for these interface modules:
4-port 10 GigE/1 GigE LR Optical with internal fail-open
4-port 10 GigE/1 GigE SR Optical 50 micron with internal fail-open
4-port 10 GigE/1 GigE SR Optical 62.5 micron with internal fail-open
4-port RJ-45 10 GigE with internal fail-open
6-port RJ-45 1 GigE with internal fail-open
Note
All RJ-45 ports support active fail-open using only a Copper Active Fail-Open kit.
8-port SFP/SFP+ 1/10 Gigabit
Note
The 8-port module supports active fail-open using a Copper and Fiber 1/10 Gigabit Active Fail-Open kit.
G3 supports both internal fail-open and active fail-open mode when connected to an Active Fail-Open (AFO) kit
Caution
Sensor outage breaks the link connecting the devices on either side of the Sensor for a brief moment and requires the renegotiation of the network link between the two peer devices connected to the Sensor. Depending on the network equipment, this disruption introduced by the renegotiation of the link layer between the two peer devices might range from a couple of seconds to more than a minute with certain vendors' devices.
Caution
A very brief link disruption might also occur while the links between the Sensor and each of the peer devices are renegotiated to place the Sensor back in in-line mode. This outage, again, varies depending on the device, and can range from a few seconds to more than a minute.
The performance of the switchover from in-line to bypass and vice versa varies depending on the vendor.
You can find the installation and troubleshooting instructions for the kit in the guide that accompanies the kit. For example, for information on the Modular kits, see the following guides:
1/10 Gigabit Modular Active Fail-Open Bypass Kit Guide
1/10 Gigabit Modular Passive Fail-Open Bypass Kit Guide