Licenses are required by the Manager to access certain Sensor functionalities. You can use the Licenses page to manage the following licenses:
System
Proxy Decryption
Virtual Sensors
System
The NS9600, NS9500, NS7600, NS7500, NS3600, and NS3500 Sensors require a license to activate the baseline throughput of 20 Gbps on NS9600, 10 Gbps on NS9500, 5 Gbps on NS7600, 3 Gbps on NS7500, 1 Gbps on NS3600, and 750 Mbps on NS3500 Sensors.
The license is provided as a .zip or .jar file. The Manager supports both formats. The license procured contains the details of the throughput for the Sensors. Contact Trellix Sales to procure the required license.
Managing licenses in NS9600, NS7600, and NS3600 Sensors
In case of the NS9600 (standalone and in fail-over pair), NS7600 and NS3600 Sensors (individual and in fail-over pair), a new license with a higher throughput is required to increase the throughput of the Sensor.
If you are using NS9600 stack, you can combine multiple licenses of different capacity to achieve the throughput required and assign them to the stack. For example, the throughput requirement of NS9600 stack (2-node) is 120 Gbps. While assigning licenses, you can import and assign any combination of licenses (20 + 40 + 60 Gbps) or, (60 + 60 Gbps) to achieve the throughput requirement of 120 Gbps. If you are using a NS9600 stack fail-over setup, use the capacity licenses for NS9600 Sensor failover to achieve the required throughput. For more information, see License requirement for NS9600 Sensor failover.
Various throughputs available for NS9600, NS7600, and NS3600 Sensors are as follows:
Sensor | Capacity License |
|---|---|
NS9600 Standalone NS9600 stack (2-node) | 20 Gbps |
40 Gbps | |
60 Gbps | |
NS7600 | 5 Gbps |
10 Gbps | |
15 Gbps | |
NS3600 | 1 Gbps |
3 Gbps | |
5 Gbps |
For more information on licenses, see the individual hardware guides available for NS9600, NS7600, and NS3600 Sensors.
Note
Upgrade capacity licenses are not available for NS9600, NS7600 and NS3600 Sensors.
Managing licenses in NS9500 and NS7500 Sensors
In the case of the NS9500 standalone and stack, and NS7500 Sensors, a new license with higher throughput, or upgrade license is required to increase the throughput of the Sensor. Various throughputs available for NS9500 and NS7500 Sensors are as follows:
Sensor | Existing license | *Upgrade license |
|---|---|---|
NS9500 standalone
| 10 Gbps |
Standalone to stack:
|
20 Gbps |
Standalone to stack:
| |
30 Gbps | Standalone to stack:
| |
NS9500 stack | 40 Gbps |
|
60 Gbps | 60 to 100 Gbps | |
100 Gbps | NA | |
NS7500 | 3 Gbps |
|
5 Gbps | 5 to 7.5 Gbps | |
7.5 Gbps | NA | |
*Upgrade capacity licenses are available for perpetual licenses only. Those are not applicable for demo or subscription licenses. | ||
For more information, see the individual quick-start guides for NS9500 and NS7500 Sensors, and NS-series Sensor Product Guide.
Proxy Decryption
The proxy SSL decryption feature requires a license to access a few Sensor functionalities. The proxy license is provided as a .zip or .jar file. The Manager supports both formats. The license procured contains the number of Sensors on which the proxy SSL feature can be enabled.
A valid outbound and inbound proxy based SSL decryption license can be obtained for the following Sensor models:
Sensor Model | Outbound proxy based SSL decryption | Inbound proxy based SSL decryption |
|---|---|---|
NS9600 stack (2-node) with 120 Gbps | Yes | Yes |
NS9600 (Standalone) with 60 Gbps | Yes | Yes |
NS9600 (Standalone) with 40 Gbps | Yes | Yes |
NS9600 (Standalone) with 20 Gbps | Yes | Yes |
NS9500 (Standalone) with 30 Gbps | Yes | Yes |
NS9500 (Standalone) with 20 Gbps | Yes | Yes |
NS9500 (Standalone) with 10 Gbps | Yes | Yes |
NS9200 | Yes | NA |
NS9100 | Yes | NA |
NS7600 (Standalone) with 15 Gbps | Yes | Yes |
NS7600 (Standalone) with 10 Gbps | Yes | Yes |
NS7600 (Standalone) with 5 Gbps | Yes | Yes |
NS7500 with 7.5 Gbps | Yes | Yes |
NS7500 with 5 Gbps | Yes | Yes |
NS7500 with 3 Gbps | Yes | Yes |
NS7300 | Yes | NA |
NS7200 | Yes | NA |
NS3600 (Standalone) with 5 Gbps | Yes | Yes |
NS3600 (Standalone) with 3 Gbps | Yes | Yes |
NS3600 (Standalone) with 1 Gbps | Yes | Yes |
For more information, see Managing licenses for proxy based SSL decryption.
Virtual Sensors
Virtual Sensors require a software license to activate the baseline throughput of 5 Gbps and 1 Gbps on VM5000 and VM600 Sensors respectively. These licenses can either be individual .jar files, or they can be bundled together and provided to you in the form of a .zip file. Each license supports a pre-defined number of Virtual IPS Sensors, and this number is specific to the license file you have procured. The Manager supports both formats. The license procured contains the details of the Sensor's throughput. The Manager checks the compliance periodically to check the number of licenses against the Sensor's throughput.
In the case of the VM5000 Sensor, 5 active licenses each of 1 Gbps are required to achieve the throughput of the Sensor. For the VM600 Sensor, only 1 active 1 Gbps license is required.
A valid outbound and inbound proxy based SSL decryption license can be obtained for the following Sensor models:
Sensor Model | Outbound proxy based SSL decryption | Inbound proxy based SSL decryption |
|---|---|---|
VM5000 | NA | NA |
VM600 | NA | NA |
VM600-SSL (ESX and KVM) | Yes | Yes |
VM600-VSS-SSL (Cloud) | Yes | Yes |
VM5000-SSL (ESX and KVM) | Yes | Yes |
For more information, see Managing licenses for Virtual Sensors in the Trellix Virtual Intrusion Prevention System Product Guide.