TMS zl Management and Configuration Guide ST.1.0.090213

1-7

Overview

Operating Modes

The TMS zl Module supports two operating modes:

■ Routing mode

■ Monitor mode

Routing Mode

In routing mode, you must set up your network infrastructure so that the

TMS zl Module acts as a router for all VLANs on which you want to manage

threats. You assign the module an IP address on these VLANs so that it can

route and filter their traffic; these VLANs are then called TMS VLANs.

Note Generally, the TMS zl Module acts as the default router for endpoints in TMS

VLANs. However, for some TMS VLANs, it might be one of multiple routers.

For example, the TMS VLAN through which the module connects to an

external network might include a WAN router that connects to the Internet.

The TMS zl Module can operate within most routing systems. For more

information on its routing capabilities, see “Routing” on page 1-60.

When a device in a TMS VLAN sends traffic to another subnet, the TMS zl

Module receives the traffic. In other words, the module receives traffic that is

routed out of or between the TMS VLANs. It does not receive—and thus does

not filter—traffic that originates in and is destined to the same VLAN.

Figure 1-1 illustrates which traffic is and is not filtered by the TMS zl Module.