300-710 · Question #96
With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?
The correct answer is D. tap. With tap mode, the FTD is deployed inline, but the network traffic flow is undisturbed. Instead, the FTD makes a copy of each packet so that it can analyze the packets. Note that rules of these types do generate intrusion events when they are triggered, and the table view of…
Question
With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?
Options
- AERSPAN
- BIPS-only
- Cfirewall
- Dtap
How the community answered
(27 responses)- A4% (1)
- B4% (1)
- D93% (25)
Explanation
With tap mode, the FTD is deployed inline, but the network traffic flow is undisturbed. Instead, the FTD makes a copy of each packet so that it can analyze the packets. Note that rules of these types do generate intrusion events when they are triggered, and the table view of intrusion events indicates that the triggering packets would have dropped in an inline deployment. There are benefits to using tap mode with FTDs that are deployed inline.
Topics
Community Discussion
No community discussion yet for this question.