Deep Discovery Inspector can be deployed as a hardware appliance or as a virtual appliance.
  • Hardware appliance: Deep Discovery Inspector can be deployed either inline or out-of-band.
    • Inline: Deep Discovery Inspector acts as a transparent bridge and can inspect decrypted TLS traffic. When deployed inline, only traffic flowing through the inline ports is inspected.
      Note
      Note
      Installing an additional inline (LAN bypass) network interface card is needed for inline deployment. For installation instructions and compatible Deep Discovery Inspector appliance models, refer to the Inline (LAN Bypass) Network Interface Card Installation Guide.
    • Out-of-band: Deep Discovery Inspector monitors network traffic by connecting to the mirror port on a switch for minimal to no network interruption. When deployed out-of-band, only traffic mirrored to the data ports is inspected.
  • Virtual appliance: Deep Discovery Inspector can only be deployed out-of-band. Deep Discovery Inspector monitors network traffic by connecting to the mirror port on a switch for minimal to no network interruption.
The figure below provides a high-level overview of supported deployments.
concept-deployment.png