Configuring multiple virtual capture interfaces on Security Analytics

Products

• Security Analytics

Issue/Introduction

When running Security Analytics on a virtual appliance, you may encounter a scenario where only one interface is configured for capture. This limitation can impact your ability to monitor and analyze traffic across multiple network interfaces.

Environment

This issue occurs specifically when Security Analytics is deployed as a virtual appliance. The default configuration of the system may restrict the use of multiple capture interfaces.

Cause

The underlying file system of the virtual appliance is not optimized by default to support multiple capture interfaces. This is a known limitation and requires manual adjustment to enable multi-interface functionality.

Resolution

Reach out to Broadcom Support Services for assistance. The support team will adjust the file system configuration of your virtual appliance to support more than 1 interface.