https://community.checkpoint.com/t5/General-Topics/Passing-SPAN-Port-Mirror-Through-Firewall-Appliance/m-p/55914#M11201 Bridge mode will only transfer traffic to the other side when the traffic needs to pass through the gateway. In other words traffic copied by the SPAN port is not destined to a mac address that is on switch-B, so it will NOT pass through the gateway, but it will be sent to the gateway though. Sun, 16 Jun 2019 20:57:20 GMT Maarten_Sjouw 2019-06-16T20:57:20Z https://community.checkpoint.com/t5/General-Topics/Passing-SPAN-Port-Mirror-Through-Firewall-Appliance/m-p/55905#M11198 <P>Hi guys,</P><P>&nbsp;</P><P>I have the following topology:</P><P>Switch A &lt;-&gt; Firewall &lt;-&gt; Switch B</P><P>&nbsp;</P><P>The firewall is running in Bridge-Mode. I want to configure SPAN on Switch A so that it will arrive to Switch B.</P><P>Is it possible using Bridge-Mode? Is there any special configuration I need to create under the specific Bridge-Group or physical interfaces? Will I be able to apply security elements such as policy and IPS on this traffic?</P> Sun, 16 Jun 2019 16:06:24 GMT https://community.checkpoint.com/t5/General-Topics/Passing-SPAN-Port-Mirror-Through-Firewall-Appliance/m-p/55905#M11198 guyxgreen 2019-06-16T16:06:24Z https://community.checkpoint.com/t5/General-Topics/Passing-SPAN-Port-Mirror-Through-Firewall-Appliance/m-p/55914#M11201 Bridge mode will only transfer traffic to the other side when the traffic needs to pass through the gateway. In other words traffic copied by the SPAN port is not destined to a mac address that is on switch-B, so it will NOT pass through the gateway, but it will be sent to the gateway though. Sun, 16 Jun 2019 20:57:20 GMT https://community.checkpoint.com/t5/General-Topics/Passing-SPAN-Port-Mirror-Through-Firewall-Appliance/m-p/55914#M11201 Maarten_Sjouw 2019-06-16T20:57:20Z