Sourcefire 3D Virtual Appliance vSwitch config

Hi guys,

We are looking at deploying a Sourcefire 3D virtual appliance

Just a little confused about the vSwitch config and wondering if anyone has deployed it or similar inline IPS devices?

Here is the diagram they have in their documentation:

I understand the traffic flows through vSwitch 4 to vSwitch 3 and to the VMs but is there a seperate port group for the protected VM or does it share a port group with the Inline Connection vNIC?

Any help appreciated