I am reading through the NSP admin guide (NSP_81_IPS_Administration_Guide_revH_en-us.pdf) and I want to validate that the following is normal behavior from the sensor.
When running a packet capture (sent to the Manager) we can notice that the captured traffic is only one way. That being from the inside source to the external destination.
example: SRC = 192.168.1.2 and DST = 220.127.116.11
The traffic crossing the sensor (sensor is inline L2 with Firewall) is returning properly to the client. It`s just that I noticed the above behavior. Is this by design?