When operating in tap or SPAN mode, the Sensor uses its Response port to respond to attacks. When deployed in tap mode, the Sensor does not inject response packets through the tap but uses the Response port.
Steps:
Plug in a Category-5e/6/6a Ethernet cable into the Response port.
This port is labeled R1 in the front panel of the NS3600 Sensor.

Connect the other end of the cable to the network device, such as a hub, switch, or router, through which you want to respond to attacks.