ASA FirePOWER - Inline Tap Mode

[Daniel Stefani]

Hello,

I would like to understand the configuration of Inline Tap Mode in ASA with FirePOWER.

To operate in this mode, I need to configure the ASA policy-map to monitor-only or can keep inline and create an Intrusion-Policy on FMC with Drop When Inline option disabled?

What would be the right option?

Regards,

Daniel Stefani

[yogdhanu]

Hi Daniel, Configuring ASA with monitor only would just send a copy of traffic to Firepower and not the actual traffic so that's passive mode. It can be configured inline and then use an intrusion policy with "drop when inline" option disabled. You would need to make sure that there is no access rule in access control policy which has action as block so that no other traffic is dropped. Let me know if it helps. Thanks, Yogesh