Page 1
Trellix Intrusion Prevention System (NS3x00 Quick Start Guide) This quick start guide explains how to quickly set up and activate your Trellix Intrusion Prevention System NS3100 and NS3200 Sensors in inline mode. These models have a throughput of 750 Mbps.
Page 2
Power cords (Trellix provides standard and international power cables) • Printed Quick Start Guide Verify the hardware and software requirements Make sure to meet the following hardware requirements. For more information, refer to Trellix Intrusion Prevention System Installation Guide. Manager Windows server system requirements...
Page 3
The following table lists the 11.1 Windows based Manager/Central Manager application requirements: Note Windows Server 2012 Standard/Windows Server 2012 R2 Standard is not supported for the Manager. Minimum required Recommended Any of the following: Operating Windows Server 2022 system Datacenter Edition operating •...
Minimum required Recommended Network 1 Gbps card 1 Gbps card Virtual CPUs 4 or more (Applicable only on a VMware platform) Table 1 VMware ESX server requirements for Windows Operating System Component Supported Virtualization software • ESXi 7.0 Update 3 •...
Manager client system requirements The following table lists the 11.1 Manager/Central Manager client requirements when using Windows 10: Minimum Recommended Operating Windows 10, English or Japanese Windows 10, version 1903 English or system Japanese Note: The display language of the Manager client must be same as that of the Manager server operating system.
Page 6
Connect the Management and Console ports On the front panel of the NS3x00 Sensors, plug a Category 5e Ethernet cable in the Management port (labeled MGMT). Plug the other end of the cable into the network device connected to your Manager server. On the front panel of the NS3x00 Sensors, plug the DB9 Console cables into the Console port (labeled Console).
Page 7
Terminal servers are provided for console access. The required settings for Hyperterminal are as follows: • Baud rate: 115200 • Stop Bits: 1 • Number of Bits: 8 • Control Flow: None • Parity: None Plug one end of the power cable into the power inlet and plug the other end into a power source. The Sensor ships with standard US power and international cables.
Page 8
The Manager installation files available for download are listed. Click on the required Manager installation file and the download starts. Refer to Trellix Intrusion Prevention System Installation Guide for detailed procedure to install the Manager application. Add the Sensor to the Manager The Manager displays the Logon page.
Page 9
Select the Sensors tab and then click Note You do not require a license file to enable IPS on NS-series Sensors. The Add Devices - Step 1 of 2 panel is displayed. Enter the following mandatory information in the appropriate fields: Name —...
Page 10
Retype the password in Confirm Shared Secret. Note The Sensor name and shared secret key that you enter in the Manager must be identical to the shared secret that you will enter later during physical installation or initialization of the Sensor (using CLI interface) as stated in the Configure Sensor information section.
Page 11
At any time during configuration, you can type a question mark (?) to get help on the Sensor CLI commands. Type commands for a list of all commands. Log on to the Sensor using the terminal connected to the Console port. At the prompt, log on using the default Sensor user name (admin) and password (admin123).
Page 12
Set the IP address of the Manager server. Type set manager ip <A.B.C.D> at the prompt. Example: set manager ip 192.2.2.2 Set the IP address and subnet mask of the Sensor. Type set sensor ip <A.B.C.D> <E.F.G.H> at the prompt. Example: set sensor ip 192.3.3.3 255.255.255.0 Note Specify an IP address using four octets separated by periods: X.X.X.X, where X is a number between 0...
Page 13
Verify successful installation Type status in the Sensor CLI. The status report is displayed. The Sensor parameter System Initialized must be yes, and for Manager communication Trust Established must be yes. From the Manager Dashboard, view the Manager status in the System Faults monitor.
Page 14
If any attack in the policy is triggered, the Sensor automatically blocks the attack. To tune this or any other Trellix-provided policies, you can clone the policy and then customize it as described in Trellix Intrusion Prevention System Product Guide.
Page 15
Your Sensor is actively monitoring connected segments and communicating with the Manager for administration and management operations. For detailed usage instructions, see Trellix Intrusion Prevention System Product Guide, or click in the upper-right corner of each window in the Manager.
Need help?
Do you have a question about the NS3 00 Series and is the answer not in the manual?
Questions and answers