The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Threat feed IoC limit per Sensor

Prev Next

Maximum IoC limit in threat feeds that you can use per Sensor model is as follows:

Sensor model

IoC Limit

IPv4 Endpoint

IPv6 Endpoint

IPv4 CIDR

IPv6 CIDR

Domain

URL

File Hash

MD5

SHA-256

NS9600 stack (2-node) - 120 Gbps throughput

150,000

75000

100,000

25000

100,000

100,000

1,000,000

1,000,000

NS9600 standalone - 20/40/60 Gbps throughput

150,000

75000

100,000

25000

100,000

100,000

1,000,000

1,000,000

NS9500 stack - 40/60/100 Gbps throughput

150,000

75000

100,000

25000

100,000

100,000

1,000,000

1,000,000

NS9500 standalone- 10/20/30 Gbps throughput

150,000

75000

100,000

25000

100,000

100,000

1,000,000

1,000,000

NS7600 - 5/10/15/20 Gbps throughput

150,000

75000

100,000

25000

100,000

100,000

1,000,000

1,000,000

NS7500 - 3/5/7.5 Gbps throughput

150,000

75000

100,000

25000

100,000

100,000

1,000,000

1,000,000

NS3600 -

1/3/5 Gbps throughput

150,000

75000

100,000

25000

100,000

100,000

1,000,000

1,000,000

IPS-VM600

25000

10000

25000

10000

100,000

100,000

100,000

100,000

IPS-VM5000

25000

10000

25000

10000

100,000

100,000

100,000

100,000