Can FTD route mode to add additional interface for passive interface?

[gwang]

Hello expert,

Our FTD is running route mode with IPS rule for inline drop. Can we setup an additional interface to connect switch on SPAN port?

One word, Can Single FTD to be both IPS and IDS? If YES, the new interface should be passive mode with passive Zone. How to configure

Access control policy rules for IDS? Our default rule is blocking any any.

Thanks,

[Nikolaj Pabst]

HI Grace,

You can do this with an interface in Passive TAP mode, if its more interfaces create a Inlineset for this :-)