Documentation GCap version 2.5.3.104

Overview

• 1. Introduction
• 2. Overall operation
• 3. Prerequisites
  • 3.1. TAP
  • 3.2. Connecting the GCap
  • 3.3. USB key
  • 3.4. GCenter
  • 3.5. Les comptes utilisateurs
• 4. First connexion
• 5. Installation steps
• 6. Performance optimization

User management

• 1. Gview profile
• 2. Gviewadm profile
• 3. Profil Setup
• 4. Change passwords
• 5. Password policy
• 6. Sessions maximum duration
• 7. Bruteforce Protection
• 8. Unlock a session

Supervising

• 1. Device Status
• 2. Inspect log files and statistics
• 3. Detection engine stats

CLI

• 1. Choose a default mode
• 2. CLI

System configuration

• 1. Modify the keymap
• 2. Set date and time
• 3. Reload network card drivers
• 4. Restart GCap
• 5. Shutdown

Network configuration

• 1. Network Settingd
• 2. Management interfaces configuration
• 3. Set hostname and domain name

Pairing with GCenter

• 1. Select compatibility with GCenter
• 2. Turn up IPsec tunnel

Upgrade

• 1. Download and trigger an update

Detection engine

• 1. Selection of capture interfaces
• 2. Enable/disable detection engine
• 3. Select scanned protocols
• 4. Synchronize MAC addresses to network interfaces
• 5. Multi-tenant
• 6. Ajouter des règles locales
• 7. File reconstruction capability

Interface cluster

• 1. Clustering
• 2. Cluster configuration
• 3. Impact on other features

Performance

• 1. CPUs assignation to the detection engine
• 2. Manage capture interfaces loadbalancing

XDP Filtering

• 1. Change native VLAN
• 2. Filter based on VLAN
• 3. Filter by Protocols

Services

• 1. Manage file-related transfers
• 2. Set retention time
• 3. Replay pcap