Restrictions for Encrypted Traffic Analytics
ETA is supported only on access ports and wireless VLAN on SDA deployment. It is not supported on management, trunk, port-channel, SVI, and loopback interfaces.
ETA and Cisco Application Visibility and Control (AVC) features can not be applied on the same interface.
When an interface has to be configured as a Flexible NetFlow monitor with ETA enabled, ETA should be configured globally prior to configuration of Flexible NetFlow on the interface.