An NGFW is deployed inline to inspect traffic without requiring any changes to existing IP addressing or routing configurations. Which deployment mode is being used?

Question

Options

• ALayer 3 routed mode
• BLayer 2 switching mode
• CVirtual Wire / transparent mode
• DVPN mode

• A
  2% (1)
• B
  4% (2)
• C
  92% (44)
• D
  2% (1)

Explanation

Virtual Wire (also called transparent mode or bump-in-the-wire) mode places the NGFW inline between two network segments without assigning IP addresses to its interfaces or participating in routing. To the rest of the network, the firewall is effectively invisible at Layer 3 - traffic passes through it as if it were a cable or a switch. This allows organizations to insert firewall inspection into an existing network with zero changes to IP addressing, routing tables, or gateway configurations. Layer 3 routed mode (A) requires the firewall to have IP addresses and act as a router. Layer 2 switching mode (B) involves the firewall participating in bridging/switching with MAC address learning. VPN mode (D) is used for encrypted tunnel termination, not transparent inline inspection.

No community discussion yet for this question.