The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Managing Licenses

Prev Next

Licenses are required by the Manager to access certain Sensor functionalities. You can use the Licenses page to manage the following licenses:

  • System

  • Proxy Decryption

  • Virtual Sensors

System

The NS9600, NS9500, NS7600, NS7500, NS3600, and NS3500 Sensors require a license to activate the baseline throughput of 20 Gbps on NS9600, 10 Gbps on NS9500, 5 Gbps on NS7600, 3 Gbps on NS7500, 1 Gbps on NS3600, and 750 Mbps on NS3500 Sensors.

The license is provided as a .zip or .jar file. The Manager supports both formats. The license procured contains the details of the throughput for the Sensors. Contact Trellix Sales to procure the required license.

Managing licenses in NS9600, NS7600, and NS3600 Sensors

In case of the NS9600 (standalone and in fail-over pair), NS7600 and NS3600 Sensors (individual and in fail-over pair), a new license with a higher throughput is required to increase the throughput of the Sensor.

If you are using NS9600 stack, you can combine multiple licenses of different capacity to achieve the throughput required and assign them to the stack. For example, the throughput requirement of NS9600 stack (2-node) is 120 Gbps. While assigning licenses, you can import and assign any combination of licenses (20 + 40 + 60 Gbps) or, (60 + 60 Gbps) to achieve the throughput requirement of 120 Gbps. If you are using a NS9600 stack fail-over setup, use the capacity licenses for NS9600 Sensor failover to achieve the required throughput. For more information, see License requirement for NS9600 Sensor failover.

Various throughputs available for NS9600, NS7600, and NS3600 Sensors are as follows:

Sensor

Capacity License

NS9600 Standalone

NS9600 stack (2-node)

20 Gbps

40 Gbps

60 Gbps

NS7600

5 Gbps

10 Gbps

15 Gbps

NS3600

1 Gbps

3 Gbps

5 Gbps

For more information on licenses, see the individual hardware guides available for NS9600, NS7600, and NS3600 Sensors.

Note

Upgrade capacity licenses are not available for NS9600, NS7600 and NS3600 Sensors.

Managing licenses in NS9500 and NS7500 Sensors

In the case of the NS9500 standalone and stack, and NS7500 Sensors, a new license with higher throughput, or upgrade license is required to increase the throughput of the Sensor. Various throughputs available for NS9500 and NS7500 Sensors are as follows:

Sensor

Existing license

*Upgrade license

NS9500 standalone

Note

You must have a stack Sensors setup to upgrade licenses from Standalone to Stack.

10 Gbps

  • 10 to 20 Gbps

  • 10 to 30 Gbps

Standalone to stack:

  • 10 to 40 Gbps

  • 10 to 60 Gbps

  • 10 to 100 Gbps

20 Gbps

  • 20 to 30 Gbps

Standalone to stack:

  • 20 to 40 Gbps

  • 20 to 60 Gbps

  • 20 to 100 Gbps

30 Gbps

Standalone to stack:

  • 30 to 40 Gbps

  • 30 to 60 Gbps

  • 30 to 100 Gbps

NS9500 stack

40 Gbps

  • 40 to 60 Gbps

  • 40 to 100 Gbps

60 Gbps

60 to 100 Gbps

100 Gbps

NA

NS7500

3 Gbps

  • 3 to 5 Gbps

  • 3 to 7.5 Gbps

5 Gbps

5 to 7.5 Gbps

7.5 Gbps

NA

*Upgrade capacity licenses are available for perpetual licenses only. Those are not applicable for demo or subscription licenses.

For more information, see the individual quick-start guides for NS9500 and NS7500 Sensors, and NS-series Sensor Product Guide.

Proxy Decryption

The proxy SSL decryption feature requires a license to access a few Sensor functionalities. The proxy license is provided as a .zip or .jar file. The Manager supports both formats. The license procured contains the number of Sensors on which the proxy SSL feature can be enabled.

A valid outbound and inbound proxy based SSL decryption license can be obtained for the following Sensor models:

Sensor Model

Outbound proxy based SSL decryption

Inbound proxy based SSL decryption

NS9600 stack (2-node) with 120 Gbps

Yes

Yes

NS9600 (Standalone) with 60 Gbps

Yes

Yes

NS9600 (Standalone) with 40 Gbps

Yes

Yes

NS9600 (Standalone) with 20 Gbps

Yes

Yes

NS9500 (Standalone) with 30 Gbps

Yes

Yes

NS9500 (Standalone) with 20 Gbps

Yes

Yes

NS9500 (Standalone) with 10 Gbps

Yes

Yes

NS9200

Yes

NA

NS9100

Yes

NA

NS7600 (Standalone) with 15 Gbps

Yes

Yes

NS7600 (Standalone) with 10 Gbps

Yes

Yes

NS7600 (Standalone) with 5 Gbps

Yes

Yes

NS7500 with 7.5 Gbps

Yes

Yes

NS7500 with 5 Gbps

Yes

Yes

NS7500 with 3 Gbps

Yes

Yes

NS7300

Yes

NA

NS7200

Yes

NA

NS3600 (Standalone) with 5 Gbps

Yes

Yes

NS3600 (Standalone) with 3 Gbps

Yes

Yes

NS3600 (Standalone) with 1 Gbps

Yes

Yes

For more information, see Managing licenses for proxy based SSL decryption.

Virtual Sensors

Virtual Sensors require a software license to activate the baseline throughput of 5 Gbps and 1 Gbps on VM5000 and VM600 Sensors respectively. These licenses can either be individual .jar files, or they can be bundled together and provided to you in the form of a .zip file. Each license supports a pre-defined number of Virtual IPS Sensors, and this number is specific to the license file you have procured. The Manager supports both formats. The license procured contains the details of the Sensor's throughput. The Manager checks the compliance periodically to check the number of licenses against the Sensor's throughput.

In the case of the VM5000 Sensor, 5 active licenses each of 1 Gbps are required to achieve the throughput of the Sensor. For the VM600 Sensor, only 1 active 1 Gbps license is required.

A valid outbound and inbound proxy based SSL decryption license can be obtained for the following Sensor models:

Sensor Model

Outbound proxy based SSL decryption

Inbound proxy based SSL decryption

VM5000

NA

NA

VM600

NA

NA

VM600-SSL (ESX and KVM)

Yes

Yes

VM600-VSS-SSL (Cloud)

Yes

Yes

VM5000-SSL (ESX and KVM)

Yes

Yes

For more information, see Managing licenses for Virtual Sensors in the Trellix Virtual Intrusion Prevention System Product Guide.