Operation Modes Parent topic

TippingPoint Advanced Threat Protection for Email can act as a Mail Transfer Agent (MTA mode), or as an out-of-band appliance (BCC mode or SPAN/TAP mode).
To configure the operation mode, go to AdministrationSystem SettingsOperation Mode.
Note
Note
The internal Postfix server cannot be used to send email notifications in BCC or SPAN/TAP mode.
For more information on specifying an external SMTP server, see Configuring the Notification SMTP Server.

Operation Modes

Mode
Description
MTA mode
(Default)
As an inline MTA, TippingPoint Advanced Threat Protection for Email protects your network from harm by blocking malicious email messages in the mail traffic flow. TippingPoint Advanced Threat Protection for Email delivers safe email messages to recipients.
BCC mode
As an out-of-band appliance, TippingPoint Advanced Threat Protection for Email receives mirrored traffic from an upstream MTA to monitor your network for cyber threats. TippingPoint Advanced Threat Protection for Email discards all replicated email messages without delivery.
SPAN/TAP mode
As an out-of-band appliance, TippingPoint Advanced Threat Protection for Email receives mirrored traffic from a SPAN/TAP device to monitor your network for cyber threats. TippingPoint Advanced Threat Protection for Email discards all replicated email messages without delivery.
If you select SPAN/TAP mode, you must add at least one monitoring rule. For more information, see Monitoring Rules for SPAN/TAP Mode.
For details, see the TippingPoint Advanced Threat Protection for Email Installation and Deployment Guide.