The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Key Licensing Concepts

Prev Next

License-driven conversion

Converting from NX to NDR Sensor mode is primarily driven by purchasing and installing an NDR Sensor feature license.

Hardware models

Minimum version: 11.0.0

Minimum version: 11.0.1

NX 8600

NX 2600, NX 3600, NX 4600, NX 5600, NX 6600, NX 8600

Virtual models

NX 10500V

vNX on ESXI(vmware): 1500V, 2500V, 2550V, 4500V, 6500V, 7500V , 8500V, 10500V

vNX on KVM: 2500V, 2550V, 4500V, 6500V, 7500V , 8500V, 10500V

vNX on Hyper-v: 2500V, 2550V, 4500V, 6500V

NDR Sensor modes

NDR Sensor operate in different modes (defend, boost, flare) which affect throughput and features.

Note

The ability to select these modes is linked to the NDR Sensor license being applied.

Bundled solutions

NDR Sensor licenses may be bundled for both the NDR console and NDR Sensor. Customers generally purchase an NDR solution that includes licenses for both components.

NDR Console Licensing

The NDR console has different license categories (essential, core, enterprise) with varying features. Currently, NDR Sensor licensing does not have feature-driven license differentiation. Licensing applies across all NDR Sensor capabilities (with differences based on mode - defend, boost, flare).