Forum Discussion
Feb 05, 2018
The VE limitations only apply to the 2nd VE in the demo, which is only used to simulate an L2 IPS. So when using a real L2 IPS, you shouldn't worry about this.
I think the fail-open depends on the IPS being used, but if the IPS doesn't have a fail-open solution it should be possible to configure a fail-open by using priority groups or a simple iRule.