Cisco 7010 Installation Manual page 83

Chapter 4 Installing a Firepower Managed Device
For Firepower devices that support tap mode, you can test and record ping latency results under the
Step 10
following sets of conditions:
• device powered off
device powered on, policy with no rules applied, inline intrusion policy protection mode
•
device powered on, policy with no rules applied, inline intrusion policy protection tap mode
•
device powered on, policy with tuned rules applied, inline intrusion policy protection mode
•
Ensure that the latency periods are acceptable for your installation. For information on resolving
excessive latency problems, see Configuring Packet Latency Thresholding and Understanding Rule
Latency Thresholding in the Firepower Management Center Configuration Guide.
Testing an Inline Bypass Interface Installation
Firepower 7000 and 8000 Series Installation Guide
4-25