Vwire mode allows your NGFW to be active, in-line and invisible to the network.
Vwire mode sees the direction of the traffic and enforces security settings.
Bypass TAPs allow you to go from in-line to off-line/out of band for POC, updates, and troubleshooting with a simple mouse click.