The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

SSL decryption support for NS-series and Virtual IPS Sensors

Prev Next

The table below shows the types of inbound and outbound SSL decryption support on different NS-series Sensor models:

Sensor Model Inbound SSL decryption Outbound SSL decryption
Known-key SSL decryption Agent based SSL decryption Proxy SSL decryption Proxy SSL decryption
NS3100 NA NA NA NA
NS3200 NA NA NA NA
NS3500 NA NA NA NA
NS5100 Yes Yes NA NA
NS5200 Yes Yes NA NA
NS7100 Yes Yes NA NA
NS7200 Yes Yes NA Yes
NS7300 Yes Yes NA Yes
NS7150 Yes Yes NA NA
NS7250 Yes Yes NA NA
NS7350 Yes Yes NA NA
NS7500 Yes Yes Yes Yes
NS9100 Yes Yes NA Yes
NS9200 Yes Yes NA Yes
NS9300 Yes Yes NA NA
NS9500 Standalone Yes Yes Yes Yes
NS9500 Stack Yes Yes NA NA

The table below distinguishes between the inbound and outbound SSL decryption support on Virtual IPS Sensors by platform:

Sensor Model Inbound SSL decryption Outbound SSL decryption
Known-key SSL decryption Agent based SSL decryption Proxy SSL decryption Proxy SSL decryption
IPS-VM600 (ESX) Yes Yes NA NA
IPS-VM600-VSS (AWS, Azure, OCI) Yes NA NA NA