When running Security Analytics on a virtual appliance, you may encounter a scenario where only one interface is configured for capture. This limitation can impact your ability to monitor and analyze traffic across multiple network interfaces.
This issue occurs specifically when Security Analytics is deployed as a virtual appliance. The default configuration of the system may restrict the use of multiple capture interfaces.
The underlying file system of the virtual appliance is not optimized by default to support multiple capture interfaces. This is a known limitation and requires manual adjustment to enable multi-interface functionality.
Reach out to Broadcom Support Services for assistance. The support team will adjust the file system configuration of your virtual appliance to support more than 1 interface.