An engineer is configuring a cisco FTD appliance in IPS-only mode and needs to utilize fail-to- wire interfaces. Which interface mode should be used to meet these requirements?

The correct answer is D. inline set. Inline Set mode places the FTD inline in the traffic path (bump-in-the-wire), allowing it to inspect and block traffic. It also supports hardware bypass (fail-to-wire), where if the FTD device fails or is restarted, the hardware physically connects the interfaces together so…

Configuration

Question

Options

Atransparent
Brouted
Cpassive
Dinline set

How the community answered

(23 responses)

A
4% (1)
B
13% (3)
C
4% (1)
D
78% (18)

Explanation

Inline Set mode places the FTD inline in the traffic path (bump-in-the-wire), allowing it to inspect and block traffic. It also supports hardware bypass (fail-to-wire), where if the FTD device fails or is restarted, the hardware physically connects the interfaces together so traffic continues to flow uninterrupted-critical for IPS-only deployments where availability is paramount. Passive mode only monitors a copy of traffic and cannot block. Transparent and routed modes are full firewall deployment modes that do not support the fail-to-wire bypass mechanism.

Topics

#FTD Interface Modes#Fail-to-wire#IPS-only Configuration#Cisco Firepower

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice