Secure wire interface mode and forwarding

Secure wire allows interfaces to be mapped one-to-one for ingress-to-egress forwarding. It differs from transparent and route modes in that there is no switching or routing lookup to forward traffic. Policies and upper-layer security features permit traffic to be forwarded through the device. This feature is available on Ethernet logical interfaces; both IPv4 and IPv6 addresses are supported. You can configure interfaces for access or trunk mode. Secure wire supports chassis cluster redundant Ethernet interfaces and virtual LAN tagging, but it does not support IRB interfaces. This feature does not support security features not supported in transparent mode, including NAT and IPsec VPN. It does support Layer 7 features, including AppSecure, IPS, and UTM.