This article describes the available options to provide 1 GbE or 10 GbE connectivity. Depending on the appliance model, this connectivity can be achieved with fiber PCIe cards or with onboard RJ45 network interfaces.
Supported appliances
10-GbE connectivity isn't offered for the appliance models from the 4x00-B, -C, and -D range.
Connectivity options
The supported card for the model D appliances is Intel X710-DA4. Use the SKU MAP-10G4-FBRD to buy this card directly from Trellix, which includes the network card and four SFPs.
The supported card for the model C appliances is the Hotlava Tambora 80G4S-G3. There's no Trellix SKU for this card, and you must purchase it from your preferred vendor.
Appliance Model |
Supported Fiber NIC |
SKU |
Subtype |
Vendor |
Size |
Medium |
Ports |
Height |
WBG-5000-B
WBG-5500-B
WBG-5000-C
WBG-5500-C |
Intel i340-F4 |
n/a |
E1G44HF |
Intel |
1 GbE |
1000BASE-SX |
quad |
Full |
Tambora 64G4 (EOL) |
n/a |
4ST2830A2 |
Hotlava |
10 GbE |
10GBASE-SR Required transceiver (gbic): HLSR10G3A SFP + HotLava modules/optics |
quad |
Low with full-height bracket mounted |
Tambora 80G4S-G3 |
MAP-10G4-FBR |
4ST3830A1F |
Hotlava |
10 GbE |
10GBASE-SR Required transceiver (gbic): HLSR10G4A SFP + HotLava modules/optics |
quad |
Low with full-height bracket mounted |
WBG-5000-D,
WBG-5500-D (same hardware platform) |
Intel i350-F4 |
n/a |
i350-F4 |
Intel |
1 GbE |
1000BASE-SX |
quad |
Full |
Intel X710-DA4 |
MAP-10G4-FBRD |
X710-DA4 |
Intel |
10 GbE |
10GBASE-SR Required transceiver (gbic): Intel E10GSFPSR |
quad |
Low with full-height bracket mounted |
SFP Modules
Model |
SFP |
SKU |
Tambora 80G4S-G3 |
HLSR10G4A |
n/a |
X710-DA4 |
E10GSFPSRG1P5 MM# 909923 |
Included in MAP-10G4-FBRD |
Cabling (SR/LR)
Only short-range (SR) SFPs have been tested and are supported. Long range (LR) hasn't been tested and also requires different SFPs.
SWG Throughput
Adding 10 GbE connectivity doesn't necessarily change the throughput that the appliance can handle. The limiting factor is the CPU and not the network connection.
NOTE: This statement is valid for all Trellix appliance models, except for the 5500-D. This model can handle more than 1 GbE of traffic when performing only HTTP URL filtering (no antivirus scanning).
MFEND
The
mfend kernel module can handle only 1 GbE of throughput. There's no plan to change this function.