1 00:00:08,240 --> 00:00:12,930 Your forte gate can operate in two operating modes. 2 00:00:13,010 --> 00:00:20,030 The first one is the Nat mode the network address translation mode and the second one is the transparent 3 00:00:20,030 --> 00:00:20,870 mode. 4 00:00:20,930 --> 00:00:22,550 What are the differences. 5 00:00:22,550 --> 00:00:31,040 Well if you remember your routing and switching lessons it would become simple in that mode your 48 6 00:00:31,040 --> 00:00:34,350 acts as an oversight layer treat device. 7 00:00:34,430 --> 00:00:36,610 It is actually a router. 8 00:00:36,770 --> 00:00:44,270 Each interface has its own IP address and its own broadcast domain in a transparent mode. 9 00:00:44,270 --> 00:00:54,590 Your 48 acts as a switch interfaces doesn't have any IP addresses and frames are being forwarded according 10 00:00:54,590 --> 00:00:58,950 to the MAC address of their destination. 11 00:00:59,210 --> 00:01:05,570 Your 48 splits the network into multiple collusion domain. 12 00:01:05,570 --> 00:01:16,820 Now let's see how we can change our 48 from and not operating mode to a transparent operating mode. 13 00:01:16,910 --> 00:01:18,640 We'll use the command line 14 00:01:21,230 --> 00:01:32,690 config sys settings and if we will use this show full command we will see that currently our operational 15 00:01:32,690 --> 00:01:43,640 mode is not if we wish to change it we'll use the set up mode and we can switch between that and transparent 16 00:01:43,700 --> 00:01:44,530 mode. 17 00:01:44,690 --> 00:01:52,430 We will use a new virtual machine that we will configure in transparent mode to learn more of its transparent 18 00:01:52,460 --> 00:01:54,510 mode capabilities. 19 00:01:54,530 --> 00:01:56,230 When do we use transparent mode. 20 00:01:56,270 --> 00:01:58,110 And when do we use in that mode. 21 00:01:58,520 --> 00:02:02,320 Well most of the times you will use these in that mode. 22 00:02:02,330 --> 00:02:10,760 Your 48 will act as an always silent treat device where each interface has its own IP address and each 23 00:02:10,760 --> 00:02:16,640 packet is being sent according to the routing table. 24 00:02:16,640 --> 00:02:23,900 Now let's look at the routing table we'll use the get router info routing table all 25 00:02:35,050 --> 00:02:43,660 and we can see that we have one static round which will round any packet that doesn't have a route in 26 00:02:43,660 --> 00:02:48,590 the routing table to the when one interface. 27 00:02:48,610 --> 00:02:59,540 We also have two other connected networks that are connected directly to our 40 gate so that happens 28 00:02:59,600 --> 00:03:01,030 on in that mode. 29 00:03:01,130 --> 00:03:04,970 But what happens on a transparent mode on a transparent node. 30 00:03:05,010 --> 00:03:12,370 Your 40 gate delivers the frames according to the MAC address table. 31 00:03:12,890 --> 00:03:15,350 When we use a transparent mode. 32 00:03:15,440 --> 00:03:27,470 We use it to scan the traffic between different segments of our network without any interference to 33 00:03:27,470 --> 00:03:34,560 the current routing that is already being happening on the network. 34 00:03:34,610 --> 00:03:38,120 That is one of the reasons that we use transparent mode. 35 00:03:38,120 --> 00:03:48,200 There are cases where we split our network into different segments and between each segment we deploy 36 00:03:48,760 --> 00:03:58,610 a 40 gate 48 will still scan the traffic will still use security profiles will still use its next generation 37 00:03:58,610 --> 00:04:07,910 firewall capabilities such as IP address and application control to block or to allow the traffic but 38 00:04:08,090 --> 00:04:16,200 it will not interfere with the organization routing that is already being used there.