The Deep Edge unit is invisible to the network. All of its interfaces are on the same subnet. You only have to configure a management IP address so that you can make configuration changes. You would typically use Bridge mode on a private network behind an existing firewall or behind a router. For details, see Overview of Bridge Mode.

The Deep Edge unit is visible to the network. All of its interfaces are on different subnets. Each interface connected to a network must be configured with an IP address valid for that network. You would typically use Routing mode when the Deep Edge unit is deployed as a gateway between private and public networks. For details, see Overview of Routing Mode.

Monitoring mode is designed for evaluating Deep Edge on a production network without blocking any traffic or making Deep Edge a point of failure in the network flow. In Monitoring mode, Deep Edge only applies policies to mirrored traffic to produce logs and reports; no blocking actions are enforced on the traffic. For details, see Overview of Monitoring Mode.