A data center's security policy requires that critical network services remain available to users even during equipment failures. To comply with this policy, the network engineer needs to configure a security appliance so that if it experiences a malfunction, legitimate network traffic is not interrupted, though it might reduce security temporarily. Which of the following failure modes should the engineer configure?
Fail-secure
Fail-open
Fail-closed
Fail-safe