쫑콩아빠의 지금 이 순간...

https://www.gigamon.com/products/optimize-traffic/application-intelligence/application-metadata.html

Deep Application Visibility for Smarter Tools

Analytics tools are only as smart as the data they receive. Gigamon Application Metadata Intelligence empowers your security information and event management (SIEM) and network performance monitoring tools with critical metadata attributes across thousands of business, consumer and IT applications. It provides the deep application visibility needed to rapidly pinpoint performance bottlenecks and potential network security risks.

A core component of Gigamon Application Intelligence, Application Metadata Intelligence helps you effectively monitor and manage the complex digital applications at the heart of your digital transformation initiatives.

• Generates more than 5,000 application-related metadata elements powered by deep packet inspection
• Provides metadata depth for monitoring components within multi-tiered digital applications
• Includes prebuilt connectors to leading security and analytics tools, including Splunk, IBM QRadar and FireEye

Bundle up and stay secure: get GigaSMART apps bundled just for security teams.

GET A DEMO

Gigamon AMI dashboard within Splunk showing suspicious connections, unusual login activity, HTTP error codes and more.

https://www.gigamon.com/products/optimize-traffic/application-intelligence/application-filtering-intelligence.html

Application Identification and Traffic Forwarding

Gigamon Application Filtering Intelligence, a key component of Gigamon Application Intelligence, extends Layer 7 visibility to thousands of common and proprietary applications. How does application filtering work?

Application Filtering Intelligence first identifies all the applications running on your network. Then, you can apply application filtering by using simple flow control to direct traffic by application, or "families" of apps, only to the tools that require it. Irrelevant application traffic is not forwarded, saving storage and processing resources.  

• Gain full visibility to the applications on your network along with the network resources they consume
• Increase tool efficiency and capacity — up to 80 percent in certain cases
• Improve network security by freeing up tool resources to protect a larger attack surface, including east-west traffic
• Decrease time manually analyzing network data with automatic application identification and isolation.
   

REQUEST A DEMO

https://www.gigamon.com/products/optimize-traffic/application-intelligence/application-visualization.html

Application Aware Networking without the Hassle

Application Visualization is a key component of Gigamon Application Intelligence. Get a complete view of the applications running on your network automatically – no hardwiring ports or writing regular expressions. Then drill down to see application usage and patterns, plus how much network resources they consume.

• Automatically identifies 3,000+ common business and consumer applications using deep packet inspection
• Classifies applications into families to enable actions to be taken on groups of applications
• Tracks proprietary and custom applications that you designate

Gigamon maintains application awareness — even as current applications change, and new applications emerge on the scene.

Application Visualization is offered within the Application Filtering Intelligence service.

REQUEST A DEMO

Application data is graphically presented through the GigaVUE Fabric Manager.

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/adaptive-packet-filtering.html

Filter matching packet content

The Adaptive Packet Filtering feature is a licensable addition to the GigaSMART® engine that can identify patterns across any part of the network packet, including the packet payload. Adaptive Packet Filtering can use this awareness to filter based on packet contents beyond Layer 2, 3, and 4 headers, including URLs, patterns in BitTorrent packets, basic application identification, and specific encapsulation protocols. Operators can define custom signatures through regular expressions to match their specific applications. The signatures can also identify sensitive data and obscure it before forwarding to tools.

Adaptive Packet Filtering can identify and forward packets based on multiple complex headers and encapsulations, including MPLS, VXLAN, MAC-in-MAC, IP-in-IP (IPv4 and/or IPv6) and others.

Benefits of the Adaptive Packet Filtering feature:

• Identifies and filters packets which use dynamic IP addresses and non-standard ports.
• Filters web-based applications that share the same L2-L4 header information. 
• Removes bandwidth-hogging traffic such as streaming services which doesn’t require monitoring and storage.
• Obscures sensitive data such as credit card and identification numbers wherever they may occur within the packet before sending the packet to monitoring and storage tools.

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/tunneling-erspan-termination.html

Extend monitoring to remote sites and the cloud

The Tunneling feature is a licensable addition to the GigaSMART® engine that helps alleviate blindness of business-critical traffic at remote sites, virtualized data centers, or hosted in a public cloud. Tunneling is used in conjunction with Flow Mapping® technology to select traffic at remote sites that should be subject to additional inspection. That traffic subset can then be forwarded via IP/UDP or L2GRE encapsulation to centralized monitoring and security resources. Tunneling also works with GigaVUE-VM for VMware, GigaVUE-VM for OpenStack, and Visibility Platform for AWS to select and tunnel traffic from within virtual environments to the Gigamon® Visibility Platform via L2GRE tunnels. With Tunneling, physical networks can utilize cloud-based tools and load balance across multiple instances.

Benefits of the Tunneling feature

• Provides security teams with access to suspicious traffic anywhere within the organization, local or remote, physical or virtual.
• Eliminates the cost of deploying and managing tools at branch offices and remote sites.
• Preserves the processing power of hypervisors to handle workload, instead of management and monitoring.
• Immediately extends monitoring and security to new acquisitions or temporary installations until other arrangements can be made.
• Enables load balancing across multiple IP-addressable virtual and cloud-based tools.
• Allows operators to take advantage of existing Cisco NEXUS features by forwarding traffic via ERSPAN tunnels to the Gigamon Visibility Platform.

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/load-balancing.html

Logically divide traffic among ports

The Load Balancing feature is a licensable addition to the GigaSMART® engine that divides and distributes traffic among multiple tools, so network and security visibility can scale beyond the capacity a single tool can provide. Using effective load balancing techniques, traffic and requests can be distributed based on a variety of options: bandwidth, cumulative traffic, packet rate, connections, round robin, and stateless hashing.

Load Balancing allows operators to include any port in the node as a member of the tool group, as well as ports operating at different speeds. Operators can also use load balancing to weight server-traffic delivery on a per-port basis, to accommodate bandwidth differences or processing capabilities of attached tools, or match and load balance based on inner addressing within encapsulated and tunneled packets.

Benefits of the Load Balancing feature

• Helps scale network infrastructure by dividing traffic between two or more tools when volume exceeds a single tool or port's capacity.
• Improves efficiency by weighting traffic application delivery to match tool processing capabilities or port bandwidth capacity.
• Automatically redistributes traffic to remaining tools in case of tool failure. Automatically restores tool availability for new traffic upon failed tool recovery.
• Enables load balancing of encapsulated or tunneled traffic (GTP, GRE, or ERSPAN).
• GTP-aware load balancing helps mobile service providers ensure improved response time and performance for individual subscribers or groups.

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/masking.html

Protect sensitive data

The Masking feature of the GigaSMART® engine provides customizable data protection by overwriting specific packet fields with a set pattern. Sensitive information is safeguarded during network analysis.

Confidentiality and compliance are crucial for a broad range of government and private organizations alike. Regulations in the financial, insurance, and healthcare industries require that sensitive data be protected. Penalties for non-compliance of such regulations can be severe, resulting in fines or even imprisonment. Masking permanently obscures the data before sending it to security and monitoring tools. Regulatory and privacy compliance becomes easier because the sensitive data is never seen, processed or stored by these tools.

Benefits of the Masking feature:

• Supports compliance with stringent data protection regulations.
• Protects network and security engineers from inadvertently being exposed to sensitive or confidential data.
• Provides an added level of data protection in cases where network monitoring and analysis functions are outsourced.

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/packet-slicing.html

Eliminate unneeded packet data

The Packet Slicing feature of the GigaSMART® engine truncates packets while preserving the portion of the packet (the protocol headers) required for network analysis. Packet Slicing can parse variable header packets, starting slicing after a named header (IP, TCP, etc.) with or without VLAN and other tags. Thus, there's no need to rely on a fixed offset to slice packets.

Packet Slicing removes payload that may be irrelevant to network monitoring and security analysis. This reduces tool throughput and disk space while improving performance and data retention. It also removes sensitive data before it is stored, which makes regulatory and privacy compliance easier.

Benefits of the Packet Slicing feature

• Removes sensitive information from each packet, thus helping address compliance and confidentiality requirements.
• Improves tool performance by eliminating unnecessary transmission of unneeded packet payload.
• Increases storage capacity by giving tools more room to store the important portions of each packet.
• Increases data retention time on forensic or network recorders.
• Reduces needed disk space for backup traffic by up to 95%.

Packet Slicing: one of many GigaSMART features

GigaSMART® offers a number of other essential traffic intelligence services required for active visibility into infrastructure blind spots, including: