300-710 SNCF: Securing Networks with Cisco Firewalls

Tap mode deploys FTD inline while leaving the production traffic flow undisturbed; FTD creates a copy of each packet for analysis rather than actively blocking or altering the traffic.