Strong Security Requires Network Visibility

How you supply network traffic to your security tools is critical. If you rely on switch or router generated NetFlow or SPAN ports, your security tools are not getting everything they need for reliable analysis. A better way to collect and send traffic to your tools is by using network taps together with Gigamon, which sits between your tools and the network layer.

Gigamon gives you:

• Reliable, full-fidelity data: No more sample-based data or dropped packets due to overloaded equipment
• Cloud observability: Monitor VM and container traffic in private or private clouds
• Greater tool efficiency: Send only selected traffic to cloud-based tools or on-prem security stack

Cybercriminals use encryption to conceal threat activities like LoTL attacks, malware, and exfiltration attempts. You need a way to efficiently inspect encrypted east-west and north-south traffic and share it with tools.

Gigamon offers two solutions that eliminate blind spots created by encrypted traffic and takes the burden off expensive security tools.

• Gigamon Precryption^™ technology provides visibility to all TLS encrypted (including TLS 1.3) cloud and container traffic.
• GigaSMART^® TLS/SSL Decryption supports both inline and out-of-band decryption for legacy and modern encryption standards.

To accurately detect threats and mitigate shadow IT, you need full application visibility plus network-derived intelligence. Gigamon Application Intelligence gives you the power to automatically identify applications and then send the right traffic to the right tools, so you don’t waste expensive security resources. Next, Gigamon provides your security and observability tools with valuable context around protocols and applications, helping you shorten investigative cycle times.   

• Application Filtering Intelligence sends only relevant application traffic to security tools while filtering out the rest; use existing investments to secure East-West traffic.
• Application Visualization accurately identifies more than 3,500 applications using deep packet inspection so shadow IT activities and port spoofing attempts don’t pass unnoticed.
  
• Application Metadata Intelligence provides more than 7,000 metadata attributes, giving your SIEM, NDR, observability, and other security tools an unfair advantage over attackers.