Trellix DLP Network Monitor integrates into a production environment without impacting live traffic and does not block or change network traffic. Trellix DLP Network Monitor connects to either a Switched Port Analyzer (SPAN) port or a network tap to passively monitor live traffic received from the router.
You can perform a first-time installation of the Trellix DLP Network Monitor appliance software on a physical hardware appliance or on a virtual machine, depending on your business needs. For subsequent installations, upgrade the appliance software. The decision tree helps you decide specific platforms where you are installing the Trellix DLP Network Monitor appliance software. Each installation method includes a workflow and procedure.
