https://community.cisco.com/t5/network-security/ftd-with-inline-set/m-p/5140268#M1114022 <P>Transparent mode and inline-set interfaces are different animals. You don't need inline-set interfaces if you want to pass OSPF through. Use transparent mode and regular interfaces instead. I believe that stateful HA doesn't replicate connections created on inline-set interfaces, because those connections are tcp-state-bypass connections from Lina point of view. But upon failover Snort should be able to pickup flows midstream and traffic should not be interrupted. This document explains inline-set interfaces very well:</P><P><A href="https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200924-configuring-firepower-threat-defense-int.html" target="_blank">https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200924-configuring-firepower-threat-defense-int.html</A></P><P>&nbsp;</P> Thu, 04 Jul 2024 20:23:41 GMT tvotna 2024-07-04T20:23:41Z https://community.cisco.com/t5/network-security/ftd-with-inline-set/m-p/5140087#M1114005 <P>Hi guys,</P> <P>I have 2 units of FTD that will be in transparent mode and I plan to configure it with inline-sets for the IPS and I plan to set it up in active-standby FTD.</P> <P>My question are:</P> <P>1. Will there still be a stateful failover in transparent FTD with inline-set interfaces?&nbsp;</P> <P>2. Can I form an OSPF neighbor with my router if my FTD in transparent mode with Inline-Set interfaces is in between the routers?</P> <P>Thanks</P> Thu, 04 Jul 2024 14:39:48 GMT https://community.cisco.com/t5/network-security/ftd-with-inline-set/m-p/5140087#M1114005 fatalXerror 2024-07-04T14:39:48Z https://community.cisco.com/t5/network-security/ftd-with-inline-set/m-p/5140268#M1114022 <P>Transparent mode and inline-set interfaces are different animals. You don't need inline-set interfaces if you want to pass OSPF through. Use transparent mode and regular interfaces instead. I believe that stateful HA doesn't replicate connections created on inline-set interfaces, because those connections are tcp-state-bypass connections from Lina point of view. But upon failover Snort should be able to pickup flows midstream and traffic should not be interrupted. This document explains inline-set interfaces very well:</P><P><A href="https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200924-configuring-firepower-threat-defense-int.html" target="_blank">https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200924-configuring-firepower-threat-defense-int.html</A></P><P>&nbsp;</P> Thu, 04 Jul 2024 20:23:41 GMT https://community.cisco.com/t5/network-security/ftd-with-inline-set/m-p/5140268#M1114022 tvotna 2024-07-04T20:23:41Z