Trellix NS 9500 Intrusion Prevention System 1U Sensor
Engineered for professionals who demand the best in performance, security, and design.
Supports inbound and outbound SSL decryption (including DH/ECDH), along with emulation-based inspection for malware, PDFs, Flash, and Microsoft Office files, plus advanced evasion protection and mobile/cloud threat analysis.
Detects and blocks threats using DNS/DGA and fast-flux analysis, sinkholing, bot heuristics, attack correlation, and a command-and-control database.
Includes traffic reassembly, signature-based detection (Trellix, open-source, Snort), allow/block controls, sandbox and virtual inspection, host quarantine, rate limiting, and HTTP decompression.
Uses threshold and heuristic detection, host connection limiting, and self-learning profile-based detection.
Provides reputation-based filtering for files, IPs, URLs, applications, and protocols, with geo-location awareness and allow listing via Trellix GTI categories.
Supports active-active and active-passive high availability with stateful failover, plus built-in and external fail-open options.
Supports IPv6, MPLS, GRE, Q-in-Q VLANs, and IPv4/IPv6 tunneling in all combinations.
Supports tiered management of up to 1,000 sensors, centralized policy control, user authentication (RADIUS/LDAP), automated failover and disaster recovery, and memory usage monitoring per device.
Full specifications for the model
| SKU | NS9500 | NS9500 | NS9500 |
|---|---|---|---|
| License | 10 Gbps license (1 unit) | 20 Gbps license (1 unit) | 30 Gbps license (1 unit) |
| Aggregate Performance | 10 Gbps | 20 Gbps | 30 Gbps |
| Maximum Throughput (UDP 1512-byte Packets) | Up to 15 Gbps | Up to 25 Gbps | Up to 35 Gbps |
| Maximum Concurrent Connections | 10,000,000 | 13,000,000 | 16,000,000 |
| Connections Per Second | 450,000 | 525,000 | 650,000 |
| HTTP Connections Per Second | 260,000 | 300,000 | 350,000 |
| Throughput With SSL Decryption (based On 10% SSL Traffic) | 10 Gbps | 18 Gbps | 26 Gbps |
| Throughput With SSL Decryption (100% SSL Traffic) | 8 Gbps | 11 Gbps | 15 Gbps |
| Maximum SSL Flow Count | 1,000,000 | 1,300,000 | 1,600,000 |
| SSL Keys Imported | 1,024 | 1,024 | 1,024 |
| Number Of Virtual IPS Systems | 1,000 | 1,000 | 1,000 |
| Maximum DoS Profiles | 5,000 | 5,000 | 5,000 |
| ACL Rules | 10,000 | 20,000 | 30,000 |
| Fixed 10 GB Ethernet / 1 GB Ethernet RJ45 Ports—with Internal Fail-open | 4 | 4 | 4 |
| Fixed 100/40 GB Ethernet Ports | 2 | 2 | 2 |
| Network I/O Slots | 2 | 2 | 2 |
| Network I/O Modules (nine Options) | 2-port QSFP28 100/QSFP+ 40 GigE module 4-port 10 GigE/1 GigE SR Optical 50 micron with fail-open 4-port 10 GigE/1 GigE SR Optical 62.5 micron with fail-open 4-port 10 GigE/1 GigE LR Optical with fail-open 4-port (QSFP+) 40 GigE 2-port (QSFP+) 40 GigE 8-port (SFP+/SFP) 10 GigE/1 GigE 6-port (RJ45) 1 GigE (with internal fail-open) 4-port (RJ45) 10 GigE/1 GigE/100 Mbps (with internal fail-open) | 2-port QSFP28 100/QSFP+ 40 GigE module 4-port 10 GigE/1 GigE SR Optical 50 micron with fail-open 4-port 10 GigE/1 GigE SR Optical 62.5 micron with fail-open 4-port 10 GigE/1 GigE LR Optical with fail-open 4-port (QSFP+) 40 GigE 2-port (QSFP+) 40 GigE 8-port (SFP+/SFP) 10 GigE/1 GigE 6-port (RJ45) 1 GigE (with internal fail-open) 4-port (RJ45) 10 GigE/1 GigE/100 Mbps (with internal fail-open) | 2-port QSFP28 100/QSFP+ 40 GigE module 4-port 10 GigE/1 GigE SR Optical 50 micron with fail-open 4-port 10 GigE/1 GigE SR Optical 62.5 micron with fail-open 4-port 10 GigE/1 GigE LR Optical with fail-open 4-port (QSFP+) 40 GigE 2-port (QSFP+) 40 GigE 8-port (SFP+/SFP) 10 GigE/1 GigE 6-port (RJ45) 1 GigE (with internal fail-open) 4-port (RJ45) 10 GigE/1 GigE/100 Mbps (with internal fail-open) |
| 10 Gigabit Ethernet | Up to 20 | Up to 20 | Up to 20 |
| 40 Gigabit Ethernet | Up to 10 | Up to 10 | Up to 10 |
| 100 Gigabit Ethernet | Up to 6 | Up to 6 | Up to 6 |
| Dedicated Response Ports (RJ45) | 1 (10G/1G) | 1 (10G/1G) | 1 (10G/1G) |
| Dedicated Management Ports (RJ45) | 1 (10G/1G) | 1 (10G/1G) | 1 (10G/1G) |
| Dimensions | 17 ¼” (W) x 29 1/16” (D) x 1 ¾” (H) | 17 ¼” (W) x 29 1/16” (D) x 1 ¾” (H) | 17 ¼” (W) x 29 1/16” (D) x 1 ¾” (H) |
| Weight | 28.55 lbs | 28.55 lbs | 28.55 lbs |
| Storage | 2x240 GB M.2 (SW RAID) | 2x240 GB M.2 (SW RAID) | 2x240 GB M.2 (SW RAID) |
| Maximum Power Consumption | — | — | — |
| DC Power Available | Optional | Optional | Optional |
| Spare Power Supply | Included | Included | Included |
| Power | 100–240 VAC (50/60Hz) | 100–240 VAC (50/60Hz) | 100–240 VAC (50/60Hz) |
| Temperature | 0° C to 35° C (operating); -40° C to 70° C (non-operating) | 0° C to 35° C (operating); -40° C to 70° C (non-operating) | 0° C to 35° C (operating); -40° C to 70° C (non-operating) |
| Relative Humidity (non-condensing) | Operational: 10% to 90%; Non-operational: 5% to 95% | Operational: 10% to 90%; Non-operational: 5% to 95% | Operational: 10% to 90%; Non-operational: 5% to 95% |
| Altitude | 0 to 10,000 feet | 0 to 10,000 feet | 0 to 10,000 feet |
| Product Regulatory Compliance - Safety Certification | UL 60950-1, UL 62368-1 (USA); CSA 22.2.No. 60950-1, CSA 22.2 No. 62368-1 (Canada); EN 60950-1, EN 62368-1 (Europe); CNS 14336-1 (Taiwan); GB 4943.1 (China); IEC 60950-1, IEC 62368-1 (International)—CB Scheme certificate and test report covering all applicable country deviations; IEC 60825 and 21CFR1040 | UL 60950-1, UL 62368-1 (USA); CSA 22.2.No. 60950-1, CSA 22.2 No. 62368-1 (Canada); EN 60950-1, EN 62368-1 (Europe); CNS 14336-1 (Taiwan); GB 4943.1 (China); IEC 60950-1, IEC 62368-1 (International)—CB Scheme certificate and test report covering all applicable country deviations; IEC 60825 and 21CFR1040 | UL 60950-1, UL 62368-1 (USA); CSA 22.2.No. 60950-1, CSA 22.2 No. 62368-1 (Canada); EN 60950-1, EN 62368-1 (Europe); CNS 14336-1 (Taiwan); GB 4943.1 (China); IEC 60950-1, IEC 62368-1 (International)—CB Scheme certificate and test report covering all applicable country deviations; IEC 60825 and 21CFR1040 |
| Product Regulatory Compliance - EMI Certification | FCC Part 15 Subpart B Class A (USA); CAN ICES-3 Class A (Canada); EN 55032, EN 55024, EN 55035, EN61000-3-2, EN61000-3-3 (Europe and International); KN32 and KN35 (South Korea); VCCI 32-1 (Japan); AS/NZS CISPR 32 (Australia and New Zealand); CNS 13438 (Taiwan); GB 9254-2008 and GB 17625.1 (China) | FCC Part 15 Subpart B Class A (USA); CAN ICES-3 Class A (Canada); EN 55032, EN 55024, EN 55035, EN61000-3-2, EN61000-3-3 (Europe and International); KN32 and KN35 (South Korea); VCCI 32-1 (Japan); AS/NZS CISPR 32 (Australia and New Zealand); CNS 13438 (Taiwan); GB 9254-2008 and GB 17625.1 (China) | FCC Part 15 Subpart B Class A (USA); CAN ICES-3 Class A (Canada); EN 55032, EN 55024, EN 55035, EN61000-3-2, EN61000-3-3 (Europe and International); KN32 and KN35 (South Korea); VCCI 32-1 (Japan); AS/NZS CISPR 32 (Australia and New Zealand); CNS 13438 (Taiwan); GB 9254-2008 and GB 17625.1 (China) |
| Product Regulatory Compliance - ROHS Compliance | Restriction of Hazardous Substances Compliance per applicable directives and standards (Europe, China, Taiwan, and International) | Restriction of Hazardous Substances Compliance per applicable directives and standards (Europe, China, Taiwan, and International) | Restriction of Hazardous Substances Compliance per applicable directives and standards (Europe, China, Taiwan, and International) |
| SKU | NS9500 | NS9500 | NS9500 |
|---|---|---|---|
| License | 40 Gbps license (2 unit) | 60 Gbps license (2 unit) | 100 Gbps license (4 unit) |
| Aggregate Performance | 40 Gbps | 60 Gbps | 100 Gbps |
| Maximum Throughput (UDP 1512-byte Packets) | Up to 50 Gbps | Up to 70 Gbps | Up to 100 Gbps |
| Maximum Concurrent Connections | 26,000,000 | 32,000,000 | 64,000,000 |
| Connections Per Second | 1,000,000 | 1,300,000 | 2,500,000 |
| HTTP Connections Per Second | 600,000 | 700,000 | 1,400,000 |
| Throughput With SSL Decryption (based On 10% SSL Traffic) | 36 Gbps | 52 Gbps | 90 Gbps |
| Throughput With SSL Decryption (100% SSL Traffic) | 22 Gbps | 30 Gbps | 60 Gbps |
| Maximum SSL Flow Count | 2,600,000 | 3,200,000 | 6,400,000 |
| SSL Keys Imported | 1,024 | 1,024 | 1,024 |
| Number Of Virtual IPS Systems | 1,000 | 1,000 | 1,000 |
| Maximum DoS Profiles | 5,000 | 5,000 | 5,000 |
| ACL Rules | 20,000 | 30,000 | 30,000 |
| Fixed 10 GB Ethernet / 1 GB Ethernet RJ45 Ports—with Internal Fail-open | 8 | 8 | 16 |
| Fixed 100/40 GB Ethernet Ports | — | — | — |
| Network I/O Slots | 4 | 4 | 8 |
| Network I/O Modules (nine Options) | 2-port QSFP28 100/QSFP+ 40 GigE module 4-port 10 GigE/1 GigE SR Optical 50 micron with fail-open 4-port 10 GigE/1 GigE SR Optical 62.5 micron with fail-open 4-port 10 GigE/1 GigE LR Optical with fail-open 4-port (QSFP+) 40 GigE 2-port (QSFP+) 40 GigE 8-port (SFP+/SFP) 10 GigE/1 GigE 6-port (RJ45) 1 GigE (with internal fail-open) 4-port (RJ45) 10 GigE/1 GigE/100 Mbps (with internal fail-open) | 2-port QSFP28 100/QSFP+ 40 GigE module 4-port 10 GigE/1 GigE SR Optical 50 micron with fail-open 4-port 10 GigE/1 GigE SR Optical 62.5 micron with fail-open 4-port 10 GigE/1 GigE LR Optical with fail-open 4-port (QSFP+) 40 GigE 2-port (QSFP+) 40 GigE 8-port (SFP+/SFP) 10 GigE/1 GigE 6-port (RJ45) 1 GigE (with internal fail-open) 4-port (RJ45) 10 GigE/1 GigE/100 Mbps (with internal fail-open) | 2-port QSFP28 100/QSFP+ 40 GigE module 4-port 10 GigE/1 GigE SR Optical 50 micron with fail-open 4-port 10 GigE/1 GigE SR Optical 62.5 micron with fail-open 4-port 10 GigE/1 GigE LR Optical with fail-open 4-port (QSFP+) 40 GigE 2-port (QSFP+) 40 GigE 8-port (SFP+/SFP) 10 GigE/1 GigE 6-port (RJ45) 1 GigE (with internal fail-open) 4-port (RJ45) 10 GigE/1 GigE/100 Mbps (with internal fail-open) |
| 10 Gigabit Ethernet | Up to 40 | Up to 40 | Up to 80 |
| 40 Gigabit Ethernet | Up to 16 | Up to 16 | Up to 32 |
| 100 Gigabit Ethernet | Up to 8 | Up to 8 | Up to 16 |
| Dedicated Response Ports (RJ45) | 2 (10G/1G) | 2 (10G/1G) | 4 (10G/1G) |
| Dedicated Management Ports (RJ45) | 2 (10G/1G) | 2 (10G/1G) | 4 (10G/1G) |
| Dimensions | 2 units each 17 ¼” (W) x 29 1/16” (D) x 1 ¾” (H) | 2 units each 17 ¼” (W) x 29 1/16” (D) x 1 ¾” (H) | 4 units each 17 ¼” (W) x 29 1/16” (D) x 1 ¾” (H) |
| Weight | 2 x 28.55 lbs | 2 x 28.55 lbs | 4 x 28.55 lbs |
| Storage | 4x240 GB M.2 (SW RAID) | 4x240 GB M.2 (SW RAID) | 8x240 GB M.2 (SW RAID) |
| Maximum Power Consumption | 2 x 598W | 2 x 598W | 4 x 598W |
| DC Power Available | Optional | Optional | Optional |
| Spare Power Supply | Included | Included | Included |
| Power | 100–240 VAC (50/60Hz) | 100–240 VAC (50/60Hz) | 100–240 VAC (50/60Hz) |
| Temperature | 0° C to 35° C (operating); -40° C to 70° C (non-operating) | 0° C to 35° C (operating); -40° C to 70° C (non-operating) | 0° C to 35° C (operating); -40° C to 70° C (non-operating) |
| Relative Humidity (non-condensing) | Operational: 10% to 90%; Non-operational: 5% to 95% | Operational: 10% to 90%; Non-operational: 5% to 95% | Operational: 10% to 90%; Non-operational: 5% to 95% |
| Altitude | 0 to 10,000 feet | 0 to 10,000 feet | 0 to 10,000 feet |
| Product Regulatory Compliance - Safety Certification | UL 60950-1, UL 62368-1 (USA); CSA 22.2.No. 60950-1, CSA 22.2 No. 62368-1 (Canada); EN 60950-1, EN 62368-1 (Europe); CNS 14336-1 (Taiwan); GB 4943.1 (China); IEC 60950-1, IEC 62368-1 (International)—CB Scheme certificate and test report covering all applicable country deviations; IEC 60825 and 21CFR1040 | UL 60950-1, UL 62368-1 (USA); CSA 22.2.No. 60950-1, CSA 22.2 No. 62368-1 (Canada); EN 60950-1, EN 62368-1 (Europe); CNS 14336-1 (Taiwan); GB 4943.1 (China); IEC 60950-1, IEC 62368-1 (International)—CB Scheme certificate and test report covering all applicable country deviations; IEC 60825 and 21CFR1040 | UL 60950-1, UL 62368-1 (USA); CSA 22.2.No. 60950-1, CSA 22.2 No. 62368-1 (Canada); EN 60950-1, EN 62368-1 (Europe); CNS 14336-1 (Taiwan); GB 4943.1 (China); IEC 60950-1, IEC 62368-1 (International)—CB Scheme certificate and test report covering all applicable country deviations; IEC 60825 and 21CFR1040 |
| Product Regulatory Compliance - EMI Certification | FCC Part 15 Subpart B Class A (USA); CAN ICES-3 Class A (Canada); EN 55032, EN 55024, EN 55035, EN61000-3-2, EN61000-3-3 (Europe and International); KN32 and KN35 (South Korea); VCCI 32-1 (Japan); AS/NZS CISPR 32 (Australia and New Zealand); CNS 13438 (Taiwan); GB 9254-2008 and GB 17625.1 (China) | FCC Part 15 Subpart B Class A (USA); CAN ICES-3 Class A (Canada); EN 55032, EN 55024, EN 55035, EN61000-3-2, EN61000-3-3 (Europe and International); KN32 and KN35 (South Korea); VCCI 32-1 (Japan); AS/NZS CISPR 32 (Australia and New Zealand); CNS 13438 (Taiwan); GB 9254-2008 and GB 17625.1 (China) | FCC Part 15 Subpart B Class A (USA); CAN ICES-3 Class A (Canada); EN 55032, EN 55024, EN 55035, EN61000-3-2, EN61000-3-3 (Europe and International); KN32 and KN35 (South Korea); VCCI 32-1 (Japan); AS/NZS CISPR 32 (Australia and New Zealand); CNS 13438 (Taiwan); GB 9254-2008 and GB 17625.1 (China) |
| Product Regulatory Compliance - ROHS Compliance | Restriction of Hazardous Substances Compliance per applicable directives and standards (Europe, China, Taiwan, and International) | Restriction of Hazardous Substances Compliance per applicable directives and standards (Europe, China, Taiwan, and International) | Restriction of Hazardous Substances Compliance per applicable directives and standards (Europe, China, Taiwan, and International) |
Download product documentation and resources
Need multiple devices for your business or project? Contact us to discuss bulk pricing, availability, and delivery options.
Contact UsExplore other configurations and models that might suit your needs.
Recommended
#NS3200
Recommended
#NS7500
Recommended
#Trellix-Intrusion-Prevention-System
Our team of experts is ready to help you find the perfect solution for your business needs. Get personalized advice and competitive quotes.
We're here to help with any questions
