Previous Topic: Linux Server Hardware SpecificationNext Topic: Connected to Network Tap/SPAN Port: Passive Mode Only


Choosing a Deployment Architecture

You must correctly deploy the NBA in terms of its network location and the data inspection port:

Important: Do not connect the NBA between your corporate firewall and the Internet. The NBA needs to listen to traffic before the firewall or other devices using NAT (Network Address Translation) hide local addresses from the Internet. If you deploy the NBA incorrectly, machine IP addresses may not match the actual IP addresses of the source machines.

The following sections summarize the supported deployment architectures.

More information:

Connected to Network Tap/SPAN Port: Passive Mode Only

Connected Inline with a Network: Active and Passive Modes