07-07-2016 09:12 AM - edited 03-12-2019 06:03 AM
I have a short term need to use a pair of SFP for inline IPS. According to the PDF this should not be done. While I understand that if the appliance loses power, we will lose those interfaces, but aside from that, a risk we may have to take, will it perform IPS properly? It will only be a temporary inline while we transition to new firewalls.
Note that SFP transceivers do not have bypass capability and should notbe used in intrusion prevention deployments.
07-07-2016 11:51 PM
Hi,
I believe, if it is temporary then you can use it but as it says it doesn't have hardware bypass capability so traffic might get dropped.
Thanks,
Ankita
07-15-2016 12:40 PM
If the transition is during a change window, and would not take that long, you should be good to go.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide