Monitoring with a CA Standard Monitor › How a CA Standard Monitor Works as a Monitoring Device › Monitoring Device Considerations

Monitoring Device Considerations

When using a CA Standard Monitor as a monitoring device, keep in mind:

• Typically, a CA Technical Representative helps you mirror TCP traffic to a monitoring device. For more information about mirroring TCP traffic, see the Best Practices for Data Acquisition Guide.
• PacketMon is the only packet sniffer certified for installation on a CA Standard Monitor or Standalone management console. To avoid conflicts with the packet capture driver, do not install any other packet sniffers, including Wireshark, on a CA Standard Monitor or Standalone management console.
• When configuring a packet capture investigation, keep in mind that a CA Standard Monitor does not include support for long term packet capture storage. To optimize available resources, configure packet captures to limit:
  • The maximum file size.
  • The number of bytes per packet.
• To limit access to the potentially sensitive contents of a packet capture, you can disable packet captures on the CA Standard Monitor.
• A CA Standard Monitor automatically monitors matching application traffic based on the client networks, server subnets, and port exclusions that are defined on the management console.
• A CA Standard Monitor monitors all types of applications.