Thanks Paulo,
I've took a closer look into the KT and have two more questions...
1) controller mirror port
Is the traffic send untagged or is the tag from the respective role used to forward the traffic to Purview?
2) mirror N packets
If I unterstand it correctly only the first 15 packets/flow are mirrored to Purview per default.
So I should be able to enable it also for remote/branch offices without having all data copied back to the controller, right ?
-Ron