topic Re: FTD as IPS Deployment in Network Security https://community.cisco.com/t5/network-security/ftd-as-ips-deployment/m-p/3697584#M1004666 Here you go.<BR /><BR /><BR /> - When you configure an Inline Pair 2 Physical interfaces are internally<BR /> bridged<BR /> - Very similar to classic inline Intrusion Prevention System (IPS)<BR /> - Available in Routed or Transparent Deployment modes<BR /> - Most of the LINA engine features (NAT, Routing etc) are not available<BR /> for flows which go through an Inline Pair<BR /> - Transit traffic can be dropped<BR /> - Few LINA engine checks are applied along with full Snort engine checks<BR /><BR /><BR />Short answer, inline pair will act as IPS and not routing will be taking<BR />place for packets coming on inline interface.<BR /> Thu, 30 Aug 2018 05:47:48 GMT Mohammed al Baqari 2018-08-30T05:47:48Z FTD as IPS Deployment https://community.cisco.com/t5/network-security/ftd-as-ips-deployment/m-p/3697274#M1004665 <P>Hi Guys,</P> <P>I am deploying a new 4100 as an IPS but when I register it in FMC it shows routed mode. Does it affect the IPS if it run in routed mode? I just want my IPS like a bump in a wire so I decided to configure it with inline pairs.</P> <P>Does it still check for routing even though my interfaces are inline pairs?</P> <P>Thanks</P> Fri, 21 Feb 2020 16:09:56 GMT https://community.cisco.com/t5/network-security/ftd-as-ips-deployment/m-p/3697274#M1004665 fatalXerror 2020-02-21T16:09:56Z Re: FTD as IPS Deployment https://community.cisco.com/t5/network-security/ftd-as-ips-deployment/m-p/3697584#M1004666 Here you go.<BR /><BR /><BR /> - When you configure an Inline Pair 2 Physical interfaces are internally<BR /> bridged<BR /> - Very similar to classic inline Intrusion Prevention System (IPS)<BR /> - Available in Routed or Transparent Deployment modes<BR /> - Most of the LINA engine features (NAT, Routing etc) are not available<BR /> for flows which go through an Inline Pair<BR /> - Transit traffic can be dropped<BR /> - Few LINA engine checks are applied along with full Snort engine checks<BR /><BR /><BR />Short answer, inline pair will act as IPS and not routing will be taking<BR />place for packets coming on inline interface.<BR /> Thu, 30 Aug 2018 05:47:48 GMT https://community.cisco.com/t5/network-security/ftd-as-ips-deployment/m-p/3697584#M1004666 Mohammed al Baqari 2018-08-30T05:47:48Z