2.2.1. Configuring a GCap and its Sigflow engine

To analyze the captured flow, the following steps must be taken:

• Synchronize the date and time of the GCap on GCenter : see Overview of date and time management

• Managing Tunnel and Management interfaces : see Management overview of `Management` and `Tunnel` interfaces

• Manage the capture interfaces: see Overview of managing the capture interfaces

• Manage single-tenant vs. multi-tenant configuration of `monx` interfaces : see Capture interfaces: single-tenant vs. multi-tenant

• Managing the aggregation of capture interfaces : see Capture interfaces: aggregation

• Pairing the GCap with GCenter

  A GCap must be paired with a GCenter.

  Data exchange only starts when the VPN tunnel (IPsec) is established between the two devices.

• Activation of the Sigflow monitor engine (by default it is deactivated).

---