Explore the concept of deep packet inspection, including why you would use it and packet capturing methods, such as inline traffic interrogation. Examine Test Access Points, how these devices copy network traffic, and traffic mirroring.
SECFND: Filtering and Packet Capture
- describe deep packet inspection (DPI), stateful firewalls, and how to use them to filter or block traffic
- work with Test Access Points (TAPs) to capture packets and describe how to mirror traffic for analysis