Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

In Bridge mode the Security Gateway acts as a Layer 2 bridge and does not hold an IP address on the monitored network segments. Identity Awareness requires Layer 3 connectivity to reach Active Directory domain controllers for identity queries and to intercept identity-bearing traffic, so it cannot be deployed on a gateway running in Bridge mode.

Load Sharing is a ClusterXL mode where multiple active gateways divide traffic; Identity Awareness is fully supported and synchronizes identity tables across cluster members.

High Availability is a ClusterXL mode with an active and standby gateway; Identity Awareness is supported and identity mappings are maintained across failover events.

Fail Open is a bypass behavior that passes traffic uninspected during a gateway failure; it does not structurally prevent Identity Awareness from being deployed during normal operation.