2.2.1. Configuring a GCap and its Sigflow engine

To analyse the captured flow, the following steps must be taken:

• Synchronise the date and time of the GCap on GCenter: see Overview of the date and time management

• Managing Tunnel (gcp1) and Management (gcp0) interfaces: see Overview of managing gcp0 and gcp1 network interfaces

• Managing Capture Interfaces: see Overview of managing capture and monitoring interfaces

• Manage single-tenant vs. multi-tenant configuration of monx interfaces: see Capture and Monitoring Interfaces: Single-tenant vs. multi-tenant

• Managing the aggregation of capture interfaces: see Capture and monitoring interfaces: aggregation

• Pairing the GCap with GCenter

  A GCap must be paired with a GCenter.
  Data exchange only starts when the VPN tunnel (IPsec) is established between the two devices.

• Activation of the Sigflow monitor engine (by default it is deactivated)

---