Would the probe be installed behind the perimeter firewall?

Yes, the probe is deployed between Main Switch and Firewall. There are mainly 2 types of deployment which is In-Line or Out-of-Path. To learn more about the differences between these deployment type please have a look at the following video.