Difference between TAP Mode and Inline Simluation

[True Warrior]

Hello Guys,

I was going thrugh documentation for Inline deployment in v6.2.0 and found something about TAP Mode (even though this option is available in previous versions as well).

In Inline sets, there is an option called TAP Mode which says that the a copy of the packet is sent to the sensor and we can generate would have dropped report when we're about to place the sensor in Inline.

There is an option called Drop when Inline in the Intrusion Policy which pretty much does that where we can generate a report for would have dropped.

I would like to know whats the difference or benefits each option does apart from the way how the traffic is handled? I understand with TAP Mode, a copy of the packet is sent.

Thanks!

[True Warrior]

I was going thrugh documentation for Inline deployment in v6.2.0 and found something about TAP Mode (even though this option is available in previous versions as well).

In Inline sets, there is an option called TAP Mode which says that the a copy of the packet is sent to the sensor and we can generate would have dropped report when we're about to place the sensor in Inline.

There is an option called Drop when Inline in the Intrusion Policy which pretty much does that where we can generate a report for would have dropped.

I would like to know whats the difference or benefits each option does apart from the way how the traffic is handled? I understand with TAP Mode, a copy of the packet is sent.

Thanks!