7125 Non-Bypass for IPS

[tahscolony]

I have a short term need to use a pair of SFP for inline IPS.  According to the PDF this should not be done. While I understand that if the appliance loses power, we will lose those interfaces, but aside from that, a risk we may have to take, will it perform IPS properly?  It will only be a temporary inline while we transition to new firewalls.

Note that SFP transceivers do not have bypass capability and should not

be used in intrusion prevention deployments.

[ankojha]

Hi,

I believe, if it is temporary then you can use it but as it says it doesn't have hardware bypass capability so traffic might get dropped.

Thanks,

Ankita

[Ed Padilla Jr]

If the transition is during a change window, and would not take that long, you should be good to go.