The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Setting up the Sensor

  • Published on Oct 5, 2026
  • 6 minute(s) read
Prev Next

NS-series Sensor port fail-open behavior

Each Sensor model is shipped with documentation on how to set up the Sensor and configure it to communicate with the Manager. This documentation consists of model-specific product guides and quick start guides. These documents provide detailed installation, configuration and cabling instructions for your Sensor.

You may need special equipment depending on your deployment strategy. Certain Sensor models have Fast Ethernet (FE) ports. Each FE port requires a Trellix IPS dongles for In-line Fail-closed mode. Dongles are included with FE-port Sensors. Gigabit Ethernet (GE) port Sensors require the optional Gigabit fail-open bypass kit (Optical Single-mode, Optical Multimode, or Copper), sold separately, for in-line fail-open mode. Refer to the appropriate fail-open kit guides for more details.

The following table shows the monitoring port types for each Sensor model.

NS-series Sensors: Port fail-open behavior
NS-series Sensor Monitoring port type Default port operation mode Internal Fail-open ports External Active Fail-open Kit External Passive Fail-open Kit
NS9500 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • G1,G2(I/O: 6x1G Cu; 4x10G Cu; 4x10G/1G Fi, 2x100G/40G Fi)
  • RJ45 1G (G3/1-2 to G3/7-8)
Supports Active Fail-open on the following ports:
  • All in I/O Modules supported in G1,G2 Group Slots
  • RJ45 1G (G3/1-2 to G3/7-8)
  • QSFP+ 40G(G0/1-2)
  • QSFP+ 100 GigE
Not supported
NS9300 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • G1,G2,G5,G6(I/O: 6x1G Cu; 4x10G Cu; 4x10G/1G Fi)
  • RJ45 1G (G3/1-2 to G3/7-8)
  • RJ45 1G (G7/1-2 to G7/7-8)
Supports Active Fail-open on the following ports:
  • All in I/O Modules supported in G1,G2,G5,G6 Group Slots
  • RJ45 1G (G3/1-2 to G3/7-8)
  • RJ45 1G (G7/1-2 to G7/7-8)
Not supported
NS9200 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • G1,G2(I/O: 6x1G Cu; 4x10G Cu; 4x10G/1G Fi)
  • RJ45 1G (G3/1-2 to G3/7-8)
Supports Active Fail-open on the following ports:
  • All in I/O Modules supported in G1,G2 Group Slots
  • RJ45 1G (G3/1-2 to G3/7-8)
  • QSFP+ 40G(G0/1-2)
Not supported
NS9100 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • G1,G2(I/O: 6x1G Cu; 4x10G Cu; 4x10G/1G Fi)
  • RJ45 1G (G3/1-2 to G3/7-8)
Supports Active Fail-open on the following ports:
  • All in I/O Modules supported in G1,G2 Group Slots
  • RJ45 1G (G3/1-2 to G3/7-8)
  • SFP+ 10G/1G (G0/1-2)
Not supported
NS7500 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • G1,G2(I/O: 6x1G Cu; 4x10G Cu; 4x10G/1G Fi)
  • RJ45 1G (G3/1-2 to G3/7-8)
Supports Active Fail-open on the following ports:
  • All in I/O Modules supported in G1,G2 Group Slots
  • RJ45 1G (G3/1-2 to G3/7-8)
  • SFP+ 10G/1G(G0/1-2)
Supported on G0/1 and G0/2 interface only.
NS7350 / NS7250 / NS7150 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • G1,G2(I/O: 6x1G Cu; 4x10G Cu; 4x10G/1G Fi)
  • RJ45 1G (G3/1-2 to G3/7-8)
Supports Active Fail-open on the following ports:
  • All in I/O Modules supported in G1,G2 Group Slots
  • RJ45 1G (G3/1-2 to G3/7-8)
  • SFP+ 10G/1G(G0/1-2)
Supported on G0/1 and G0/2 interface only.
NS7300 / NS7200 / NS7100 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • G1,G2(I/O: 6x1G Cu; 4x10G Cu; 4x10G/1G Fi)
  • RJ45 1G (G3/1-2 to G3/7-8)
Supports Active Fail-open on the following ports:
  • All in I/O Modules supported in G1,G2 Group Slots
  • RJ45 1G (G3/1-2 to G3/7-8)
  • SFP+ 10G/1G (G0/1-2)
Supported on G0/1 and G0/2 interface only.
NS5200 / NS5100 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • RJ45 1G (G2/1-2 to G2/7-8)
Supports Active Fail-open on the following ports:
  • SFP+ 10/SFP 1G (G0/1-2)
  • SFP 1G Cu/Fi(G1/1-2 to G1/11-12)
  • RJ45 1G(G2/1-2 to G2/7-8)
Supported on G0/1-2, G1/1-2 to G1/11-12 interface ports.
NS3500 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • RJ45 1G(1-2 and 3-4)
Not supported Not supported
NS3200/NS3100 GE ports Inline fail-open Supports built-in internal Fail-open on the following ports:
  • RJ45 1G(1-2 to 7-8)
Supports Active Fail-open on the following ports:
  • RJ45 1G(1-2 to 7-8)
Not supported

The NS-series Sensors support network interface modules in the G1 and G2 slots. Based on the type of modules, the ports have fail-open behavior as briefed below.

Interface modules: Only for NS9500 Sensor (G1 and G2 slot ports)
I/O modules Monitoring port type Default port operation mode Internal (Fail-open built-in) External AFO Kit External PFO Kit
2-port (QSFP+) 100 GigE GE ports Inline fail-closed No Required for active fail-open Not supported
4-port (QSFP+) 40 GigE
2-port (QSFP+) 40 GigE
2-port 100/40 GigE SR MTP/MPO with Internal fail-open Inline-fail open Yes
Interface modules: Only NS9x00 Sensors (G1 and G2 slot ports)
I/O modules Monitoring port type Default port operation mode Internal (Fail-open built-in) External AFO Kit External PFO Kit
4-port (QSFP+) 40 GigE GE ports Inline fail-closed No Required for active fail-open Not supported
2-port (QSFP+) 40 GigE
Interface modules: NS9x00, NS7500, NS7x50, and NS7x00 Sensors (G1 and G2 ports)
I/O modules Monitoring port type Default port operation mode Internal (Fail-open built-in) External AFO Kit External PFO Kit
8-port (SFP+/SFP) 10/1 GigE GE ports Inline fail-closed No Required for active fail-open Not supported
4-port RJ-45 10 GigE with internal fail-open GE ports Inline fail-open Yes (All port pairs) Required for active fail-open Not supported
6-port RJ-45 1 GigE with internal fail-open
4-port SFP+ 1/10 GigE SR Optical 50 micron with internal fail-open
4-port SFP+ 1/10 GigE SR Optical 62.5 micron with internal fail-open
4-port SFP+ 1/10 GigE LR Optical with internal fail-open

VM-IPS Sensor port fail-open behavior

Virtual IPS Sensor Monitoring port type Default port operation mode Internal (Fail-open built-in) External Active Fail-open Kit External Passive Fail-open Kit
IPS-VM600 GE ports Inline fail-closed No Required for active fail-open Not supported

Note

External AFO kit is applicable to scenarios where the Virtual Sensor is between two physical network devices. For inline inspection of traffic to virtual machines, only fail-closed mode is applicable.

M-series Sensor port fail-open behavior

M-series Sensor Monitoring port type Default port operation mode Internal Fail-open ports External Active Fail-open Kit External Passive Fail-open Kit
M8000 GE ports Inline fail-closed None Supports Active Fail-open on the following ports:
  • XFP 10G(1A-B to 6A-B)
  • SFP 1G Cu/Fi(7A-B to 14A-B)
Supports Passive Fail-open on the following ports:
  • XFP 10G(1A-B to 6A-B)
  • SFP 1G Cu/Fi(7A-B to 14A-B)
M6050 GE ports Inline fail-closed None Supports Active Fail-open on the following ports:
  • XFP 10G(1A-B to 4A-B)
  • SFP 1G Cu/Fi(5A-B to 8A-B)
Supports Passive Fail-open on the following ports:
  • XFP 10G(1A-B to 4A-B)
  • SFP 1G Cu/Fi(5A-B to 8A-B)
M4050 GE ports Inline fail-closed None Supports Active Fail-open on the following ports:
  • XFP 10G(1A-B to 2A-B)
  • SFP 1G Cu/Fi(3A-B to 6A-B)
Supports Passive Fail-open on the following ports:
  • XFP 10G(1A-B to 2A-B)
  • SFP 1G Cu/Fi(3A-B to 6A-B)
M3050 GE ports Inline fail-closed None Supports Active Fail-open on the following ports:
  • XFP 10G(1A-B to 2A-B)
  • SFP 1G Cu/Fi(3A-B to 6A-B)
Supports Passive Fail-open on the following ports:
  • XFP 10G(1A-B to 2A-B)
  • SFP 1G Cu/Fi(3A-B to 6A-B)
M2950 GE ports Inline fail-closed Supports internal Fail-open on the following ports:
  • RJ45 1G(7A-B to 10A-B)
Supports Active Fail-open on the following ports:
  • SFP 1G Cu/Fi(1A-B to 6A-B)
  • RJ45 1G(7A-B to 10A-B)
Supports Passive Fail-open on the following ports:
  • SFP 1G Cu/Fi(1A-B to 6A-B)
M2850 GE ports Inline fail-open Supports internal Fail-open on the following ports:
  • RJ45 1G(7A-B to 10A-B)
Supports Active Fail-open on the following ports:
  • SFP 1G Cu/Fi(1A-B to 6A-B)
  • RJ45 1G(7A-B to 10A-B)
Supports Passive Fail-open on the following ports:
  • SFP 1G Cu/Fi(1A-B to 6A-B)
M1450 GE ports Inline fail-open Supports internal Fail-open on the following ports:
  • RJ45 1G(1A-B to 4A-B)
Not supported Not supported
M1250 GE ports Inline fail-open Supports internal Fail-open on the following ports:
  • RJ45 1G(1A-B to 4A-B)
Not supported Not supported

Copyright © 2026 Musarubra US LLC | Privacy | Legal | AI Disclaimer