How to Choose Active or Passive Mode?

If you only want to capture and analyze files and emails, switch stream blocking off (passive mode).
If you want the NBA to capture, analyze, and block files and emails, switch stream blocking on (active mode).
Note: When stream blocking is switched on, the NBA can only block files and emails if it is connected inline (between the corporate LAN and the Internet). If stream blocking is enabled while not inline, the event log will incorrectly report that an action was performed.
If you want to be able to decode SSL sessions, the NBA must be inline, and stream blocking must be switched on (active mode).