IPS fail-open for FTD

[tato386]

ASA with FirePower had a "fail open/close" setting to control access in case of SFR module failure.  From what I can tell, with an FTD device the IPS function is integrated into the firewall (LINA?) so is this setting NA in the FTD environment?

Thanks,

Diego

[Marvin Rhoads · Accepted solution]

It is mostly not applicable with the exception of the optional network module that is available for some models that offers fail-to-wire capability. Very few customers opt for those since they are quite expensive and only available for appliance that offer a network module expansion slot.

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html

Yes I think you can config failed open/closed in ftd 

Check link above 

[Marvin Rhoads]

Note the IPS-only mode for which you can do Snort fail open in software is not the mode 98% of customers are running.