NS-series Sensor port fail-open behavior
Each Sensor model is shipped with quick-start guides on how to set up the Sensor and configure it to communicate with the Manager, or a content sheet that provides access to model-specific hardware guide documentation. These documents provide detailed installation, configuration and cabling instructions for your Sensor.
The following table shows the monitoring port types for each Sensor model.
NS-series Sensor | Monitoring port type | Default port operation mode | Internal Fail-open ports | External Active Fail-open Kit | External Passive Fail-open Kit |
|---|---|---|---|---|---|
NS9600 | GE ports | Inline fail-open - on I/O pluggable modules with built-in fail-open Inline fail-close - on G0 Inline fail-close - on G1/G2 for 4-Port 100/40 Gigabit SR MTP/MPO | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Not supported |
NS9500 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Not supported |
NS9300 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Not supported |
NS9200 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Not supported |
NS9100 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Not supported |
NS7600 | GE ports | In-line fail-open on pluggable I/O modules In-line fail-close on built-in G0 | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Not supported |
NS7500 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Supported on G0/1 and G0/2 interface only. |
NS7350 / NS7250 / NS7150 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Supported on G0/1 and G0/2 interface only. |
NS7300 / NS7200 / NS7100 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Supported on G0/1 and G0/2 interface only. |
NS5200 / NS5100 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Supported on G0/1-2, G1/1-2 to G1/11-12 interface ports. |
NS3600 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Not supported |
NS3500 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supported
| Not supported |
NS3200/NS3100 | GE ports | Inline fail-open | Supports built-in internal Fail-open on the following ports:
| Supports Active Fail-open on the following ports:
| Not supported |
The NS-series Sensors support network interface modules in the G1, G2 and G3 slots. Based on the type of modules, the ports have fail-open behavior as briefed below.
I/O modules | Monitoring port type | Default port operation mode | Internal (Fail-open built-in) | External AFO Kit | External PFO Kit |
|---|---|---|---|---|---|
4-port 100/40 GigE SR MTP/MPO* | GE ports | Inline fail-close | No | Required for active fail-open | Not supported |
4-port 100/40 GigE SR MTP/MPO with internal fail open* | GE ports | Inline fail-open | Yes (All port pairs) | Required for active fail-open | Not supported |
4-port 40 GigE LR4 with internal fail open* | |||||
4-port 100 GigE LR4 with internal fail open* | |||||
4-port 100/40 GigE BiDi with internal fail open* | |||||
6-port RJ45 10/1 GigE with internal fail-open | |||||
8-port 10/1 GigE SM and MM with internal fail-open | |||||
*These network interface modules are supported only in G1 and G2 ports of NS9600 Sensor. | |||||
Important
The 4-port 100/40 Gigabit with internal fail open interface modules (that is, 100/40 Gigabit SR MTP/MPO, 40 Gigabit LR4, 100 Gigabit LR4, and 100/40 Gigabit BiDi) are supported in NS9600 Sensors running on 11.1 Update 8 version or later.
I/O modules | Monitoring port type | Default port operation mode | Internal (Fail-open built-in) | External AFO Kit | External PFO Kit |
|---|---|---|---|---|---|
2-port (QSFP28) 100 GigE | GE ports | Inline fail-closed | No | Required for active fail-open | Not supported |
4-port (QSFP+) 40 GigE | |||||
2-port (QSFP+) 40 GigE | |||||
2-port 100/40 GigE SR MTP/MPO with Internal fail-open | Inline-fail open | Yes |
I/O modules | Monitoring port type | Default port operation mode | Internal (Fail-open built-in) | External AFO Kit | External PFO Kit |
|---|---|---|---|---|---|
4-port (QSFP+) 40 GigE | GE ports | Inline fail-closed | No | Required for active fail-open | Not supported |
2-port (QSFP+) 40 GigE |
I/O modules | Monitoring port type | Default port operation mode | Internal (Fail-open built-in) | External AFO Kit | External PFO Kit |
|---|---|---|---|---|---|
6-port RJ45 10/1 GigE with internal fail-open | GE ports | Inline fail-open | Yes (All port pairs) | Required for active fail-open | Not supported |
8-port 10/1 GigE SM and MM with internal fail-open |
I/O modules | Monitoring port type | Default port operation mode | Internal (Fail-open built-in) | External AFO Kit | External PFO Kit |
|---|---|---|---|---|---|
8-port (SFP+/SFP) 10/1 GigE | GE ports | Inline fail-closed | No | Required for active fail-open | Not supported |
4-port RJ-45 10 GigE with internal fail-open | GE ports | Inline fail-open | Yes (All port pairs) | Required for active fail-open | Not supported |
6-port RJ-45 1 GigE with internal fail-open | |||||
4-port SFP+ 1/10 GigE SR Optical 50 micron with internal fail-open | |||||
4-port SFP+ 1/10 GigE SR Optical 62.5 micron with internal fail-open | |||||
4-port SFP+ 1/10 GigE LR Optical with internal fail-open |
I/O modules | Monitoring port type | Default port operation mode | Internal (Fail-open built-in) | External AFO Kit | External PFO Kit |
|---|---|---|---|---|---|
4-port RJ-45 1 Gbps/100 Mbps/10 Mbps with internal fail-open | GE ports | Inline fail-open | Yes (All port pairs) | Required for active fail-open | Not supported |
4-port 10/1 GigE MM 50/62.5 μm with internal fail-open |
VM-IPS Sensor port fail-open behavior
Virtual IPS Sensor | Monitoring port type | Default port operation mode | Internal (Fail-open built-in) | External Active Fail-open Kit | External Passive Fail-open Kit |
|---|---|---|---|---|---|
IPS-VM600 and IPS-VM5000 | GE ports | Inline fail-closed | No | Required for active fail-open | Not supported |
Note
External AFO kit is applicable to scenarios where the Virtual Sensor is between two physical network devices. For inline inspection of traffic to virtual machines, only fail-closed mode is applicable.