topic Can FTD route mode to add additional interface for passive interface? in Network Security https://community.cisco.com/t5/network-security/can-ftd-route-mode-to-add-additional-interface-for-passive/m-p/3570938#M132829 <HTML><HEAD></HEAD><BODY><P>Hello expert,</P><P></P><P>Our FTD is running route mode with IPS rule for inline drop. Can we setup an additional interface to connect switch on SPAN port?</P><P>One word, Can Single FTD to be both IPS and IDS? If YES, the new interface should be passive mode with passive Zone. How to configure</P><P>Access control policy rules for IDS? Our default rule is blocking any any.</P><P></P><P>Thanks,</P></BODY></HTML> Fri, 13 Jul 2018 20:35:38 GMT gwang 2018-07-13T20:35:38Z Can FTD route mode to add additional interface for passive interface? https://community.cisco.com/t5/network-security/can-ftd-route-mode-to-add-additional-interface-for-passive/m-p/3570938#M132829 <HTML><HEAD></HEAD><BODY><P>Hello expert,</P><P></P><P>Our FTD is running route mode with IPS rule for inline drop. Can we setup an additional interface to connect switch on SPAN port?</P><P>One word, Can Single FTD to be both IPS and IDS? If YES, the new interface should be passive mode with passive Zone. How to configure</P><P>Access control policy rules for IDS? Our default rule is blocking any any.</P><P></P><P>Thanks,</P></BODY></HTML> Fri, 13 Jul 2018 20:35:38 GMT https://community.cisco.com/t5/network-security/can-ftd-route-mode-to-add-additional-interface-for-passive/m-p/3570938#M132829 gwang 2018-07-13T20:35:38Z Re: Can FTD route mode to add additional interface for passive interface? https://community.cisco.com/t5/network-security/can-ftd-route-mode-to-add-additional-interface-for-passive/m-p/3570939#M132831 <HTML><HEAD></HEAD><BODY><P>HI Grace,</P><P></P><P>You can do this with an interface in Passive TAP mode, if its more interfaces create a Inlineset for this <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P></BODY></HTML> Sat, 14 Jul 2018 05:28:16 GMT https://community.cisco.com/t5/network-security/can-ftd-route-mode-to-add-additional-interface-for-passive/m-p/3570939#M132831 Nikolaj Pabst 2018-07-14T05:28:16Z