Supported deployment modes

Every port on the Sensor supports the following deployment modes:

SPAN or Hub
Tap
In-line, fail-closed
In-line, fail-open

Additionally, Trellix IPS provides features vital to today's complex networks: interface groups (also called port clustering), and High-Availability.

In the following example, a single Trellix IPS NS-9100 Sensor is deployed to monitor the several external and internal points of exposure of an enterprise network. This includes the Web Presence, Corporate Internet Access for employees, employee Remote Access, Extranet connections, and internal attacks on critical department servers such as Finance and HR.

Deployment example

Network Security Platformprotecting enterprise network

In this example, the ports on this NS-9100 Sensor might be configured as such:

Tap 1: Ports G1/1 and G1/2 run in Tap mode and respond to attacks via Response port R1.
Tap 2: Ports G2/1 and G2/2 run in Tap mode and respond to attacks via Response port R2.
SPAN from Switch A: Port G2/3 runs in SPAN mode and inject response packets back to the switch through the SPAN port.
SPAN from Switch B: Port G2/4 runs in SPAN mode and responds to attacks via Response port R3.