Prefiltering

Prefiltering allows you to filter traffic at UCT-Vs before sending it to the GigaVUE V Series Nodes. For prefiltering the traffic, GigaVUE‑FM allows you to create a prefiltering policy template. You can apply the policy template to a monitoring session.

You can define a policy template with rules and filter values.

• You can apply a policy template to multiple monitoring sessions.

• A monitoring session can use only one template.

• Each monitoring session can have a maximum of 16 rules.

You can also edit a specific policy template with required rules and filter values for a particular monitoring session while editing a monitoring session. However, the customized changes are not saved in the template.

Key Points for prefiltering in Next Generation UCT-Vs:

■

Prefiltering is supported only in Next Generation UCT-Vs. It is not supported for the classic mirroring mechanism.

■

Prefiltering is supported for both Linux and Windows UCT-Vs.

■

Only one prefiltering policy applies to a single monitoring session. All the agents in that monitoring session are configured with the respective prefiltering policy.

■

For multiple monitoring sessions using the same agent to acquire the traffic, if one monitoring session uses a prefilter and the other does not, then the prefiltering policy cannot be applied. The policy is set to PassAll, and prefiltering is not performed.

■

When multiple monitoring sessions utilize a single agent to capture traffic, and one session uses a prefilter while the other does not, the prefiltering policy is not applied. In this scenario, the policy defaults to PassAll, resulting in the omission of any prefiltering.

For details, refer to Create Prefiltering Policy Template