A network engineer needs to configure IPS mode on a Secure Firewall Threat Defense device to inspect traffic and operate as an IDS. The engineer has already configured the passive interface on the Secure Firewall Threat Defense device and SPAN on the switch. What must the engineer configure next?