Network Taps - Passive installation

Full Duplex TAP with 2 separate data streams for TX and RX data.
(See below for Aggregated TAP with a single interleaved data stream)
This diagram shows the installation of a Passive (ie Receive only) network TAP located between a firewall and a main switch with 2 NICs.
This placement will send all incoming and outgoing traffic to the IDS sensor allowing it to see any attacks that manage to bypass the firewall security.

Full Duplex Aggregation TAP with 1 interleaved data stream for TX and RX data.
This diagram shows the installation of a Passive (ie Receive only) network TAP located between a firewall and a main switch with a single NIC.
This placement will send all incoming and outgoing traffic to the IDS sensor allowing it to see any attacks that manage to bypass the firewall security.