Packet Capture Module Initial Setup Steps

Complete these tasks in the Riverbed Console before you deploy PCM on any device.

To complete the initial setup:

  1. If you are new to the Riverbed Console, view the top-level Welcome page.

    1. Make note of the topics in the left pane for future reference.

  2. Review the Packet Capture Module Overview help page.

  3. Log in to the Riverbed Console and add the desired PCM roles to your user account.

    1. Navigate to the User Management page:

      1. Click System (the gear icon) at the bottom of the left menu.

      2. Open User Management.

    2. Update your user account with at least PCM Admin and PCM Operator.

    3. See Riverbed Console Built-in Roles for PCM role definitions.

  4. Create additional Riverbed Console accounts with the appropriate PCM roles as needed for your environment. See Riverbed Console Built-in Roles.

  5. Create your AWSClosed Amazon Web Services. A cloud computing platform that provides infrastructure services, including data storage and AI inference services used by . or AzureClosed Role-Based Access Control storage container for PCAPClosed Packet Capture. A file format that contains captured network packet data, typically used for network analysis and troubleshooting. files.

    1. You can do this at any time before you first harvest packets, but you must complete this step before you can create a Storage ProfileClosed A configuration that defines where the stores PCAP files, specifying the storage type and connection details for customer-managed repositories..

    2. See Create an S3 bucket for PCM or Create an Azure blob container for PCM.

  6. Navigate to the PCM page:

    1. Click Apps in the left menu.

    2. Click Apps Library.

    3. Open Packet Capture Module.

    If you do not see Packet Capture as an option, you do not yet have any PCM roles assigned, return to step 4. From the Packet Capture device list, click the Settings icon in the top right.

  7. Review and update the three configuration areas described in Packet Capture Configuration Settings:

    1. Capture Profile

    2. Storage Profile

    3. Global Settings.

  8. Update the default capture profileClosed A configuration template that defines packet capture parameters. with the desired settings. Review the help page and decide on your settings.

    Important: Your capture profile gives you the option to have a continuous capture job started automatically when PCM is newly deployed on one or more devices. Many customers want this feature, some do not. Choose whatever is most appropriate for you now. You can change your mind later and make updates. Set the toggle switch to the desired setting before your first deployment.

    If desired, you can create additional capture profiles with unique settings. Only one capture profile can have the auto-start toggle enabled.

  9. Create a Storage ProfileClosed A configuration that defines where the stores PCAP files, specifying the storage type and connection details for customer-managed repositories. with the values you captured when you created your AWSClosed Amazon Web Services. A cloud computing platform that provides infrastructure services, including data storage and AI inference services used by . or AzureClosed Role-Based Access Control PCAP storage.

    1. This step assumes you have already created the actual PCAP repository in either AWSClosed Amazon Web Services. A cloud computing platform that provides infrastructure services, including data storage and AI inference services used by . or AzureClosed Role-Based Access Control.

    2. The Storage Profile holds the details needed for the module to securely harvest packets to your repository.

    3. You can have more than one Storage Profile to control access to PCAPs for different support teams. Users pick the appropriate Storage Profile when they execute a harvest operation.

  10. Review or modify Global Settings with the desired values.

    1. This is a safety net that prevents PCM from using all free space on a device.

    2. Review the default setting and modify as you see fit, then save.

    3. All capture jobs honor this setting.

  11. Congratulations! You have completed the setup steps for PCM, you can now proceed to deploy one or more PCM modules to your endpoint devices via the Unified Agent Manager

Next: Proceed to Initial deployment to deploy the module on one device and validate your configuration.