Ds-Gigasmart V2
Ds-Gigasmart V2
Ds-Gigasmart V2
ThreatINSIGHT
GigaSMART
SIEM
APM
• •
header and payload content to improve tool accuracy tools for inspection, allowing tools’ resources to focus
on their primary tasks
engines from any GigaVUE® HC series node, without port- or card-based restrictions, and combine
In GigaVUE Cloud Suite, GigaSMART applications run on the virtual visibility node (typically GigaVUE
• Avoid data-speed mismatches between the • Collect, aggregate, and distribute relevant data
network and tools to the right security tools
•
and private cloud environments
•
• ™
for automated threat
tunnels by correlating and passing detection and forensics
2
GIGASMART | DATA SHEET
De-duplication •
their capacity
comparison criteria and duplicate detection window • Enable forensics tools to store more data
Header Stripping/Protocol De-encapsulation Allow any and all tools to more effectively monitor the network
Remove heavy tagging and encapsulation protocol headers
custom protocols
Packet Slicing •
volume and more packets
header reference • Maintain regulatory compliance by removing sensitive and
private data
Advanced Tunneling •
• premises tools
•
• cloud-based tools
• •
with network MTU limits appliances
• Reliable and intact delivery over IP networks
NetFlow Generation •
• such as forensics for analysis
•
• Send to up to four collectors improve their core performance
•
3
GIGASMART | DATA SHEET
Application Filtering •
• only those that are not of interest
• • Extract and treat each application,
or family of applications, uniquely based on threat potential and
each tool’s needs
•
teams make better decisions faster
5G and 4G LTE CUPS Correlation • Provides granular “subscriber awareness” visibility into 5G and
5G and 4G networks, where Gigamon nodes in different network monitoring, and broadens security coverage
locations share session information to ensure accurate •
GTP Correlation • Ensure each monitoring tool gets to see all mobile core sessions
associated with a user or domain
user plane sessions together
SIP/RTP Correlation •
quality, troubleshooting, and voice recordings
and/or balancing, keeping signaling and media data plane • Ensure each monitoring tool gets to see all real-time media
sessions together sessions associated with a user
4
GIGASMART | DATA SHEET
Stateful Flow Sampling (FlowVUE®) • Achieve meaningful network monitoring without monitoring
Stateful user-session sampling based on IP address, and when every user’s or domain’s sessions
combined with GTP Correlation can sample based on subscriber •
samples for each tool port or tool port group from a common
pool of correlated control and user plane data
Video Data Records • Allows GigaSMART modules to process video records for
video tools instead of having to use their probes
sending snippets of video stream packets to tools •
• •
Includes slicing, masking, source port labeling, and GigaVUE tunnel de-encapsulation
• •
Includes slicing, masking, source port labeling, and tunnel de-encapsulation
•
• Includes slicing, masking, source port labeling, and tunnel de-encapsulation
•
• Does not include any GigaSMART features by default
•
•