there is one warning firewall is not functioning correctly

Tap mode allows you to test your Firewall rules, without disturbing the flow of traffic. If rules aren’t properly tested before deployment, all traffic could become blocked and your computer could become inaccessible. This allows you to preview the effect of the rules on traffic, without any action being taken. It’s important to test your Firewall rules in either Tap mode or Inline mode with the action for the rules set to Log Only before deploying them. All rules are applied to the network traffic before they proceed up the protocol stack.

Inline mode: Packet streams pass directly through the Deep Security network engine.

When in Tap mode, Deep Security offers no protection beyond providing a record of events. However any issues detected do not result in packet or connection drops. The traffic is still processed by the Firewall and/or intrusion prevention modules, if they are enabled.

Tap mode: Packet streams are not modified.The network engine operates in one of two modes:

For the Firewall and intrusion prevention modules, the network engine performs a packet sanity check and also makes sure each packet passes the Firewall and intrusion prevention rules. The Firewall module (as well as the intrusion prevention and web reputation modules) includes a Deep Security network engine that decides whether to block or allow packets. Test Firewall rules before deploying them Restrictive or permissive Firewall design.Test Firewall rules before deploying them.Make sure you understand the Firewall rule actions and rule priorities before creating your rules and proceed with extra caution when creating Allow rules because they implicitly deny everything else not defined. The configuration and administration of your Firewall must be performed carefully and there is no one set of rules that fits all environments. It is recommended that you test your Firewall rules in tap mode and then switch to inline mode when everything is working correctly. Like the intrusion prevention and web reputation modules, the Firewall module can also be run in two modes: inline or tap. Deep Security Firewall is a highly flexible Firewall that you can configure to be restrictive or permissive.

There is one warning firewall is not functioning correctly