3 -6
Firepower 7000 Series Hardware Installation Guide
Chapter 3 Installing a Firepower 7000 Series Managed Device
Identifying the Sensing Interfaces
Figure 3-7
Four 1000BASE-T Copper Interfaces
You can use the copper interfaces to passively monitor up to four separate network segments. You can
also use paired interfaces in inline or inline with bypass mode to deploy the device as an intrusion
prevention system on up to two networks.
If you want to take advantage of the device’s automatic bypass capability, you must connect either the
two interfaces on the left or the two interfaces on the right to a network segment. Automatic bypass
capability allows traffic to flow even if the device fails or loses power. After you cable the interfaces,
you use the web interface to configure a pair of interfaces as an inline set and enable bypass mode on
the inline set.
SFP Interfaces
When you install Cisco SFP transceivers into the SFP sockets, you can passively monitor up to eight
separate network segments. You can also use paired interfaces in inline, non-bypass mode to deploy the
device as an intrusion detection system on up to four networks.
Cisco SFP transceivers are available in 1G copper, 1G short range fiber, or 1G long range fiber, and are
hot-swappable. You can use any combination of copper or fiber transceivers in your device in either
passive or inline configuration. Note that SFP transceivers do not have bypass capability and should not
be used in intrusion prevention deployments. To ensure compatibility, use only SFP transceivers
available from Cisco. See
Using SFP Transceivers in Firepower 71x5 and AMP7150 Devices, page B-1
for more information.
Figure 3-8
Sample SFP Transceivers
Figure 3-9
SFP Sockets