In technical perspective, is this an appliance or VM software that we need to install in an existing infra? Will this be inline or just use SPAN?

It would be a great help also to other if discussing this in a technical or in a network design so that Administrators will know where they will put this solution in their infra.