AnsweredAssumed Answered

R1200 Gateway Monitor Interface

Question asked by Patricio Cachaco on Jun 9, 2018
Latest reply on Jun 12, 2018 by Günther W. Albrecht

Hi all,

 

I have a R1200 gateway with a interface running in monitor mode with a mirror on a switch pointing to the monitor interfaces. We notice that after we connect the interface to the switch all the tcp session that where already estabilshed dont see in the logs or application categorization, only tcp sessions that the syn-synack and ack was seen in the monitor mode appers in the log/events. Is this behavior normal for a monitor interface.

 

Thanks

Patricio

Outcomes