Restrictions

The following restrictions apply to flow-tap services:

You cannot configure dynamic flow capture (DFC) and flow-tap features on the same router simultaneously.
When the DFC process or the AS or MultiServices PIC configured for flow-tap processing restarts, all filters are deleted and the mediation devices are disconnected.
Only the first fragment of an IPv4 fragmented packet stream is sent to the content destination.
Port mirroring might not work in conjunction with flow-tap processing.
If flow-tap is configured, you cannot configure the filter action then syslog for any firewall filter running on the same platform.
Running the flow-tap application over an IPSec tunnel on the same router can cause packet loops and is not supported.