WEBVTT

00:08.240 --> 00:12.930
Your forte gate can operate in two operating modes.

00:13.010 --> 00:20.030
The first one is the Nat mode the network address translation mode and the second one is the transparent

00:20.030 --> 00:20.870
mode.

00:20.930 --> 00:22.550
What are the differences.

00:22.550 --> 00:31.040
Well if you remember your routing and switching lessons it would become simple in that mode your 48

00:31.040 --> 00:34.350
acts as an oversight layer treat device.

00:34.430 --> 00:36.610
It is actually a router.

00:36.770 --> 00:44.270
Each interface has its own IP address and its own broadcast domain in a transparent mode.

00:44.270 --> 00:54.590
Your 48 acts as a switch interfaces doesn't have any IP addresses and frames are being forwarded according

00:54.590 --> 00:58.950
to the MAC address of their destination.

00:59.210 --> 01:05.570
Your 48 splits the network into multiple collusion domain.

01:05.570 --> 01:16.820
Now let's see how we can change our 48 from and not operating mode to a transparent operating mode.

01:16.910 --> 01:18.640
We'll use the command line

01:21.230 --> 01:32.690
config sys settings and if we will use this show full command we will see that currently our operational

01:32.690 --> 01:43.640
mode is not if we wish to change it we'll use the set up mode and we can switch between that and transparent

01:43.700 --> 01:44.530
mode.

01:44.690 --> 01:52.430
We will use a new virtual machine that we will configure in transparent mode to learn more of its transparent

01:52.460 --> 01:54.510
mode capabilities.

01:54.530 --> 01:56.230
When do we use transparent mode.

01:56.270 --> 01:58.110
And when do we use in that mode.

01:58.520 --> 02:02.320
Well most of the times you will use these in that mode.

02:02.330 --> 02:10.760
Your 48 will act as an always silent treat device where each interface has its own IP address and each

02:10.760 --> 02:16.640
packet is being sent according to the routing table.

02:16.640 --> 02:23.900
Now let's look at the routing table we'll use the get router info routing table all

02:35.050 --> 02:43.660
and we can see that we have one static round which will round any packet that doesn't have a route in

02:43.660 --> 02:48.590
the routing table to the when one interface.

02:48.610 --> 02:59.540
We also have two other connected networks that are connected directly to our 40 gate so that happens

02:59.600 --> 03:01.030
on in that mode.

03:01.130 --> 03:04.970
But what happens on a transparent mode on a transparent node.

03:05.010 --> 03:12.370
Your 40 gate delivers the frames according to the MAC address table.

03:12.890 --> 03:15.350
When we use a transparent mode.

03:15.440 --> 03:27.470
We use it to scan the traffic between different segments of our network without any interference to

03:27.470 --> 03:34.560
the current routing that is already being happening on the network.

03:34.610 --> 03:38.120
That is one of the reasons that we use transparent mode.

03:38.120 --> 03:48.200
There are cases where we split our network into different segments and between each segment we deploy

03:48.760 --> 03:58.610
a 40 gate 48 will still scan the traffic will still use security profiles will still use its next generation

03:58.610 --> 04:07.910
firewall capabilities such as IP address and application control to block or to allow the traffic but

04:08.090 --> 04:16.200
it will not interfere with the organization routing that is already being used there.