Chapter 11Blocking Traffic Using Inline Interface Mode

An FTD device in Inline interface mode can block unintended traffic while it remains invisible to the network hosts. However, in Chapter 9, “Firepower Deployment in Transparent Mode,” you learned about Transparent Mode, which can also block traffic and keeps itself transparent in the network. So, why would someone choose Inline Mode? This chapter explores the advantages of Inline Mode and demonstrates its action and configuration.

Inline Mode Essentials

FTD supports a wide variety of block actions, such as simple blocking, blocking with reset, interactive blocking, and interactive blocking with reset. However, a block action cannot drop any suspicious packet if the interfaces are not set ...

Get Cisco Firepower Threat Defense (FTD) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.