쫑콩아빠의 지금 이 순간...

https://www.gigamon.com/products/optimize-traffic/subscriber-intelligence/flowvue-subscriber-awareness.html

Carriers: make big data manageable

The FlowVUE® feature is a licensable addition to the GigaSMART® engine that provides subscriber IP-based flow sampling, which enables existing security and monitoring tools to connect to the latest high-speed pipes by providing a representative view of traffic for diagnostic coverage. Unlike traditional diagnostic methods, the FlowVUE feature intelligently reduces the amount of traffic, while keeping the integrity of the data flows intact, but at a lower speed feed within a smaller pipe.

The FlowVUE feature allows for active sampling of a subscriber’s device (known as a user endpoint IP or UE IP) across GPRS Tunneling Protocol user-data plane (GTP-u) tunnels. The integrity of the subscriber flows is preserved by forwarding all the flows associated with the sampled UE IP to the appropriate monitoring and analytic tools.

The numerous benefits of FlowVUE

• Enhances accuracy of Quality of Experience (QoE) monitoring.
• Cost-effectively reduces the amount of data, while enabling Big Data throughput processing.
• Further reduces traffic volumes to the tool infrastructure when combined with the advanced filtering capabilities of GigaSMART Adaptive Packet Filtering.
• Enables operators to detect and replace inactive devices through user-configurable timeouts.

Take advantage of our new bundled GigaSMART apps to be subscriber-aware!

https://www.gigamon.com/products/optimize-traffic/subscriber-intelligence/gtp-correlation.html

Subscriber-aware forwarding

The GTP Correlation feature is a licensable, robust and intelligent addition to the GigaSMART® engine that enables mobile service providers to monitor subscriber data in GPRS Tunneling Protocol (GTP) tunnels. Because it understands the stateful nature of this protocol, the GTP Correlation feature can match and pass all of an identified subscriber’s control and data sessions to the appropriate analytics, performance and billing subsystems to help ensure an accurate view of the session performance and the subscriber’s quality of experience.

With GTP Correlation, mobile operators can now intelligently forward subscriber sessions to specific tools by filtering on subscriber IDs or tunnel IDs -- from ranges of subscribers down to a specific, high-value subscriber.

Benefits of the GTP Correlation feature:

• More efficient, effective tool processing throughput.
• Improved analytics accuracy from reliable correlation of subscriber sessions.
• Helps maximize quality of experience and monetizing services with more accurate end-user quality of experience metrics.
• More reliable accounting, billing, and subscription management.
• Fewer errors through accurate correlation of subscriber data fragmented in transit.

Take advantage of our new bundled GigaSMART apps to be subscriber-aware!

https://www.gigamon.com/products/optimize-traffic/application-intelligence/application-metadata.html

Deep Application Visibility for Smarter Tools

Analytics tools are only as smart as the data they receive. Gigamon Application Metadata Intelligence empowers your security information and event management (SIEM) and network performance monitoring tools with critical metadata attributes across thousands of business, consumer and IT applications. It provides the deep application visibility needed to rapidly pinpoint performance bottlenecks and potential network security risks.

A core component of Gigamon Application Intelligence, Application Metadata Intelligence helps you effectively monitor and manage the complex digital applications at the heart of your digital transformation initiatives.

• Generates more than 5,000 application-related metadata elements powered by deep packet inspection
• Provides metadata depth for monitoring components within multi-tiered digital applications
• Includes prebuilt connectors to leading security and analytics tools, including Splunk, IBM QRadar and FireEye

Bundle up and stay secure: get GigaSMART apps bundled just for security teams.

GET A DEMO

Gigamon AMI dashboard within Splunk showing suspicious connections, unusual login activity, HTTP error codes and more.

https://www.gigamon.com/products/optimize-traffic/application-intelligence/application-filtering-intelligence.html

Application Identification and Traffic Forwarding

Gigamon Application Filtering Intelligence, a key component of Gigamon Application Intelligence, extends Layer 7 visibility to thousands of common and proprietary applications. How does application filtering work?

Application Filtering Intelligence first identifies all the applications running on your network. Then, you can apply application filtering by using simple flow control to direct traffic by application, or "families" of apps, only to the tools that require it. Irrelevant application traffic is not forwarded, saving storage and processing resources.  

• Gain full visibility to the applications on your network along with the network resources they consume
• Increase tool efficiency and capacity — up to 80 percent in certain cases
• Improve network security by freeing up tool resources to protect a larger attack surface, including east-west traffic
• Decrease time manually analyzing network data with automatic application identification and isolation.
   

REQUEST A DEMO

https://www.gigamon.com/products/optimize-traffic/application-intelligence/application-visualization.html

Application Aware Networking without the Hassle

Application Visualization is a key component of Gigamon Application Intelligence. Get a complete view of the applications running on your network automatically – no hardwiring ports or writing regular expressions. Then drill down to see application usage and patterns, plus how much network resources they consume.

• Automatically identifies 3,000+ common business and consumer applications using deep packet inspection
• Classifies applications into families to enable actions to be taken on groups of applications
• Tracks proprietary and custom applications that you designate

Gigamon maintains application awareness — even as current applications change, and new applications emerge on the scene.

Application Visualization is offered within the Application Filtering Intelligence service.

REQUEST A DEMO

Application data is graphically presented through the GigaVUE Fabric Manager.

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/adaptive-packet-filtering.html

Filter matching packet content

The Adaptive Packet Filtering feature is a licensable addition to the GigaSMART® engine that can identify patterns across any part of the network packet, including the packet payload. Adaptive Packet Filtering can use this awareness to filter based on packet contents beyond Layer 2, 3, and 4 headers, including URLs, patterns in BitTorrent packets, basic application identification, and specific encapsulation protocols. Operators can define custom signatures through regular expressions to match their specific applications. The signatures can also identify sensitive data and obscure it before forwarding to tools.

Adaptive Packet Filtering can identify and forward packets based on multiple complex headers and encapsulations, including MPLS, VXLAN, MAC-in-MAC, IP-in-IP (IPv4 and/or IPv6) and others.

Benefits of the Adaptive Packet Filtering feature:

• Identifies and filters packets which use dynamic IP addresses and non-standard ports.
• Filters web-based applications that share the same L2-L4 header information. 
• Removes bandwidth-hogging traffic such as streaming services which doesn’t require monitoring and storage.
• Obscures sensitive data such as credit card and identification numbers wherever they may occur within the packet before sending the packet to monitoring and storage tools.

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/tunneling-erspan-termination.html

Extend monitoring to remote sites and the cloud

The Tunneling feature is a licensable addition to the GigaSMART® engine that helps alleviate blindness of business-critical traffic at remote sites, virtualized data centers, or hosted in a public cloud. Tunneling is used in conjunction with Flow Mapping® technology to select traffic at remote sites that should be subject to additional inspection. That traffic subset can then be forwarded via IP/UDP or L2GRE encapsulation to centralized monitoring and security resources. Tunneling also works with GigaVUE-VM for VMware, GigaVUE-VM for OpenStack, and Visibility Platform for AWS to select and tunnel traffic from within virtual environments to the Gigamon® Visibility Platform via L2GRE tunnels. With Tunneling, physical networks can utilize cloud-based tools and load balance across multiple instances.

Benefits of the Tunneling feature

• Provides security teams with access to suspicious traffic anywhere within the organization, local or remote, physical or virtual.
• Eliminates the cost of deploying and managing tools at branch offices and remote sites.
• Preserves the processing power of hypervisors to handle workload, instead of management and monitoring.
• Immediately extends monitoring and security to new acquisitions or temporary installations until other arrangements can be made.
• Enables load balancing across multiple IP-addressable virtual and cloud-based tools.
• Allows operators to take advantage of existing Cisco NEXUS features by forwarding traffic via ERSPAN tunnels to the Gigamon Visibility Platform.

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/load-balancing.html

Logically divide traffic among ports

The Load Balancing feature is a licensable addition to the GigaSMART® engine that divides and distributes traffic among multiple tools, so network and security visibility can scale beyond the capacity a single tool can provide. Using effective load balancing techniques, traffic and requests can be distributed based on a variety of options: bandwidth, cumulative traffic, packet rate, connections, round robin, and stateless hashing.

Load Balancing allows operators to include any port in the node as a member of the tool group, as well as ports operating at different speeds. Operators can also use load balancing to weight server-traffic delivery on a per-port basis, to accommodate bandwidth differences or processing capabilities of attached tools, or match and load balance based on inner addressing within encapsulated and tunneled packets.

Benefits of the Load Balancing feature

• Helps scale network infrastructure by dividing traffic between two or more tools when volume exceeds a single tool or port's capacity.
• Improves efficiency by weighting traffic application delivery to match tool processing capabilities or port bandwidth capacity.
• Automatically redistributes traffic to remaining tools in case of tool failure. Automatically restores tool availability for new traffic upon failed tool recovery.
• Enables load balancing of encapsulated or tunneled traffic (GTP, GRE, or ERSPAN).
• GTP-aware load balancing helps mobile service providers ensure improved response time and performance for individual subscribers or groups.