https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4887820#M1102802 <P>Note the IPS-only mode for which you can do Snort fail open in software is not the mode 98% of customers are running.</P> Wed, 19 Jul 2023 14:29:30 GMT Marvin Rhoads 2023-07-19T14:29:30Z https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4886974#M1102727 <P>ASA with FirePower had a "fail open/close" setting to control access in case of SFR module failure.&nbsp; From what I can tell, with an FTD device the IPS function is integrated into the firewall (LINA?) so is this setting NA in the FTD environment?</P> <P>Thanks,</P> <P>Diego</P> Tue, 18 Jul 2023 13:24:36 GMT https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4886974#M1102727 tato386 2023-07-18T13:24:36Z https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4887813#M1102799 <P>It is mostly not applicable with the exception of the optional network module that is available for some models that offers fail-to-wire capability. Very few customers opt for those since they are quite expensive and only available for appliance that offer a network module expansion slot.</P> Wed, 19 Jul 2023 14:23:47 GMT https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4887813#M1102799 Marvin Rhoads 2023-07-19T14:23:47Z https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4887816#M1102800 <P><A href="https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html</A></P> <P>Yes I think you can config failed open/closed in ftd&nbsp;</P> <P>Check link above&nbsp;</P> Wed, 19 Jul 2023 14:25:45 GMT https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4887816#M1102800 MHM Cisco World 2023-07-19T14:25:45Z https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4887820#M1102802 <P>Note the IPS-only mode for which you can do Snort fail open in software is not the mode 98% of customers are running.</P> Wed, 19 Jul 2023 14:29:30 GMT https://community.cisco.com/t5/network-security/ips-fail-open-for-ftd/m-p/4887820#M1102802 Marvin Rhoads 2023-07-19T14:29:30Z