Can Advanced Threat Protection's Inline interfaces both be on the same subnet?

Products

• Endpoint Detection and Response
• Advanced Threat Protection Platform

Issue/Introduction

Can the Advanced Threat Protection 8880 appliance with dual Inline scanning interfaces be configured where both Inline interfaces are on the same subnet?

Example:

Inline1 IP: 10.10.12.25

Inline2 IP: 10.10.12.225

Resolution

This configuration is not supported on the Advanced Threat Protection 8880 appliance. Each Inline and Management interface needs to be on separate subnets. As of ATP 2.3, the web interface will allow you to configure both Inline interfaces on the same subnet, but there will be unintended consequence if they are configured this way and it is not supported.