QRadar Network Packet Capture user accounts and authentication setup

User authentication on the QRadar® Network Packet Capture appliance is a two-stage process. When a user tries to log in, authentication is done locally. If authentication fails, the user is authenticated against any configured Active Directory or Lightweight Directory Access Protocol (LDAP) server. If both types of authentication fail, the user is not granted access.

Note: If the QRadar Network Packet Capture appliance is a member of a QRadar Network Packet Capture group, the user account and authentication configurations are automatically synchronized across to the entire group.