The monitor interface of the capture port 1 (used for packet acquisition) in the Trellix DLP Network Monitor appliance supports parsing jumbo frames that are used in local area networks. Jumbo frames are Ethernet frames that carry large payloads per packet. These frames enhance network throughput and improve CPU utilization for large file transfers by enabling more efficient payloads per packet.
Jumbo frame support is enabled by default in virtual appliances that are hosted in the VMware environment. To enable jumbo frame support in hardware appliances, which is disabled by default, specify the maximum transmission unit (MTU) packet size in the back-end configuration file.
For details about enabling JUMBO frames and entering valid MTU size values, contact Technical Support.
Supported jumbo frame size in Trellix DLP Network Monitor appliance:
Trellix DLP Network Monitor appliance model | MTU size |
|---|---|
Trellix DLP Network appliance setup in VMware virtual environment | 9000 bytes |
Trellix DLP 8800, Trellix DLP 7700, Trellix DLP 6600 | 9600 bytes |