https://community.cisco.com/t5/network-security/hello-experts-need-some-knowledge-on-firepower-applicance/m-p/4155411#M1074097 <P>We don't want to send all our traffic to IPS hence I was looking for options where I can deploy the same device as IPS for some critical data and IDS for other traffic. Some of my friends say firepower can send tcp resets even when its configured as IDS, is that achievable? My understanding was IDS can not take any action since its passively listening to traffic spanned to it. Can someone shed some light on this to me if there is a way to do this ?</P> Tue, 22 Sep 2020 16:53:52 GMT skc455 2020-09-22T16:53:52Z https://community.cisco.com/t5/network-security/hello-experts-need-some-knowledge-on-firepower-applicance/m-p/4155411#M1074097 <P>We don't want to send all our traffic to IPS hence I was looking for options where I can deploy the same device as IPS for some critical data and IDS for other traffic. Some of my friends say firepower can send tcp resets even when its configured as IDS, is that achievable? My understanding was IDS can not take any action since its passively listening to traffic spanned to it. Can someone shed some light on this to me if there is a way to do this ?</P> Tue, 22 Sep 2020 16:53:52 GMT https://community.cisco.com/t5/network-security/hello-experts-need-some-knowledge-on-firepower-applicance/m-p/4155411#M1074097 skc455 2020-09-22T16:53:52Z https://community.cisco.com/t5/network-security/hello-experts-need-some-knowledge-on-firepower-applicance/m-p/4155424#M1074100 <P>IDS indeed is completely passive and will not send resets or otherwise block any flows it it's configured properly. If in doubt you can always just feed the appliance from a span or tap port.</P> <P>Depending on the appliance and software type you are running, you can mix IPS and IDS inline sets on your appliance.</P> Tue, 22 Sep 2020 17:14:57 GMT https://community.cisco.com/t5/network-security/hello-experts-need-some-knowledge-on-firepower-applicance/m-p/4155424#M1074100 Marvin Rhoads 2020-09-22T17:14:57Z https://community.cisco.com/t5/network-security/hello-experts-need-some-knowledge-on-firepower-applicance/m-p/4155455#M1074102 <P>Thank you for confirming Marvin</P> Tue, 22 Sep 2020 18:36:14 GMT https://community.cisco.com/t5/network-security/hello-experts-need-some-knowledge-on-firepower-applicance/m-p/4155455#M1074102 skc455 2020-09-22T18:36:14Z