Simple definition
A mode to insert a FortiGate between two segments without a conventional routing.
Technical definition
One virtual wire pair combines two interfaces to make traffic transit transparent while applying policies and inspections.
What is it used for ?
Add a security check to an existing network without significantly changing the address.
Practical example
One FortiGate may be inserted between a switch heart and server network.
Common issues
- Network loop
- Insufficient
- Management of firewall inaccessible without dedicated interface
Related terms
Key takeaway: Exact behavior and commands may vary depending on versions, products and architectures.