Implement a Trellix SIEM solution scaled to meet your needs. You can use a single device or build a system with many devices.
Adding components to your network environment allows you to increase performance, add functionality, and increase event storage capability. For example, adding the following components or more advanced models of an existing component can scale your network protection.
Note
Trellix ESM combination devices installed on virtual machines have limits to the number of components that you can add.
Small-scale Trellix ESM solution
One Trellix ESM device gives you visibility to network events.
.png "GUID-A3434B86-B4BC-4C61-B983-3A01964EC1B9-low.png") |
Large scale Trellix ESM solution
Multiple Trellix ESM devices give you visibility into events on a large enterprise network. Add Trellix ESM devices as the network grows and the number of events increases.
.png "GUID-57D69931-F4A7-4D34-9FA9-9E42A4580807-low.png") |