Connecting the Fail-Open module involves the following:
Steps:
Ear mount the Fail-Open module.
Based on the type of Fail-Open module, insert the transreceiver into the Fail-Open Module ports (MON0 and MON1).
For 10G Fail-Open module, insert the SFP+ transreceiver (SR or LR)
For 40G Fail-Open module, insert the QSFP+ transceiver (BiDi, SR4, or LR4)
Plug an inside network cable connector (LC SM (10/40 G), LC MM (10/40 G), or MTP/MPO MM type) into the Network port labeled NET0 on the Active Fail-Open module.
Plug the other end of this cable into the corresponding network device.
Plug an outside network cable into the Network port labeled NET1 (LC SM (10/40 G), LC MM (10/40 G), or MTP/MPO MM type) on the Active Fail-Open module.
Plug the other end of this cable into the corresponding network device.
Plug a proper fiber cable (inside) into the monitoring port of the Sensor.
Plug the other end of the cable into the appliance port labeled MON0 on the Active Fail-Open module.
Plug a proper fiber cable (outside) into the corresponding peer port.
(For example, if you used 1 in step 1, plug the cable into port 2)
Plug the other end of the cable into the appliance port labeled MON1 on the Active Fail-Open module.
Note
With this cable configuration, Sensor monitoring port 1 views traffic as originating inside the network, and port 2 views traffic as originating outside the network. Note that this configuration (1 = outside, 2 = inside) must match the port configuration specified for this Sensor, and that the ports must be enabled. For more information on Port configuration accomplished via the Trellix IPS Manager, refer to Trellix Intrusion Prevention System Product Guide.