Forum Discussion
Erik_Novak
May 18, 2018Employee
To clarify the documentation a bit, in passive mode, ASM analyzes a copy of the traffic but does not modify it. It cannot enforce any actions, but can log events and display reports. This method is non-intrusive and does not require configuring any VLANs or IP addresses. The use case for this is customers evaluating our products with minimal risk, no performance impact, and in need of quick deployment. A policy based on the Passive Deployment Template is recommended in this scenario because it cannot impact traffic.