topic Re: Limitations of FTD in Transparent Mode in Network Security

Limitations of FTD in Transparent Mode

animesh.mishra — Tue, 12 Mar 2019 11:17:20 GMT

Hi Techies, Can anyone please help on below Issue its really appreciating till now for yours entire help. "If we plant a FTD in Transparent Mode/Layer2 then what are limitation in terms of IPS/IDS, Malware and URL subscriptions. Can we still enforce the Security Features. What are other limitations" Thanks

Re: Limitations of FTD in Transparent Mode

Sheraz.Salim — Sun, 16 Dec 2018 09:41:13 GMT

If we plant a FTD in Transparent Mode/Layer2 then what are limitation in terms of IPS/IDS, Malware and URL subscriptions. Can we still enforce the Security Features. What are other limitations

in terms of transparent mode on FTD there is no limitation in terms of IPS/IDS, Malware and URL subscription. what model you have?

this link will tell you what are the spec.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/data_sheet-c78-736661.html

Re: Limitations of FTD in Transparent Mode

balaji.bandi — Sun, 16 Dec 2018 10:23:40 GMT

Any transparent firewall is a Layer 2 firewall that acts like a “bump in the wire,” or a “stealth firewall,” and is not seen as a router hop to connected devices.

in use cases where you want to forward all the L2 traffic via FW. ( you have difficulties to change topology in exiting environment and deploy FTD inline.)

un supported features :

1. DHCP relay

2. routing protocol (only static allowed)

3. multicast routing.

4. QoS

5. VPN.

Re: Limitations of FTD in Transparent Mode

Francesco Molino — Sun, 16 Dec 2018 16:03:31 GMT

Hi

Deploying FTD in transparent mode won't remove any features from next-gen features.
Limitations are on other features.
If you implement FTD and redirect the traffic using span to monitor the traffic, there you'll have some limitations.

Re: Limitations of FTD in Transparent Mode

animesh.mishra — Mon, 17 Dec 2018 03:04:09 GMT

Thanks Bud

Re: Limitations of FTD in Transparent Mode

Francesco Molino — Mon, 17 Dec 2018 05:58:55 GMT

You're welcome