What is the difference between inline and inline tap on Cisco Firepower?

The correct answer is D. Inline mode can drop malicious traffic. The fundamental distinction is enforcement capability. Inline mode places the Firepower sensor directly in the traffic path, allowing it to actively block or drop malicious packets (IPS functionality). Inline tap mode duplicates traffic to the sensor for analysis but the…

Deployment

Question

Options

AInline tap mode can send a copy of the traffic to another device.
BInline tap mode does full packet capture.
CInline mode cannot do SSL decryption.
DInline mode can drop malicious traffic.

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
6% (2)
D
88% (28)

Explanation

The fundamental distinction is enforcement capability. Inline mode places the Firepower sensor directly in the traffic path, allowing it to actively block or drop malicious packets (IPS functionality). Inline tap mode duplicates traffic to the sensor for analysis but the original traffic flows through unaffected - it cannot block anything. Both modes can inspect traffic, but only inline mode provides active prevention.

Topics

#Cisco Firepower Deployment#Inline Mode#Inline Tap Mode#Security Enforcement

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice