How your Packet Capture Files are Protected

Restricting access to Packet Capture (PCAP Packet Capture. A file format that contains captured network packet data, typically used for network analysis and troubleshooting.) files is a foundational feature of the Packet Capture Module. Many features were specifically designed to ensure that only authorized users have access to your PCAP files.

PCAP files are only transferred from an end point device to your customer managed repository when an authorized user has requested a "Harvest The process of retrieving PCAP files from devices and transferring them to a customer-provided repository for analysis." operation. You are responsible for assigning user RBAC Role-Based Access Control roles that control which users have access to the Packet Capture Module Device Manager User Interface with the ability to request a Harvest Operation.

Riverbed will never take custody of, or store, your PCAP files in our SaaS environment. PCAP files are transferred directly from the end point device which received the Harvest command, to your designated PCAP repository which you configured in the Storage Profile A configuration that defines where the stores PCAP files, specifying the storage type and connection details for customer-managed repositories. used by the Harvest action. The PCAP file transfer itself is encrypted based on industry standard encryption protocols.

You are responsible for establishing a PCAP repository within your corporate security boundary and ensuring that this repository only accepts encrypted connections. You should configure write-only access for the Packet Capture Module based on instructions in the help system. Riverbed provided software will never require read access to the contents of your designated PCAP repository.

You are responsible for managing the repository free space and for designating which of your employees have access to the repository. You are also responsible for all costs associated with your designated PCAP repository.