MACSEC for FastConnect now allows Fail Open mode. This would allow unencrypted traffic to flow on the FastConnect virtual circuit when the MACSEC session goes down. See FastConnect Security for more details.