What's New

What's New contains a list of features and functionalities introduced in recent releases.

 

 

GigaVUE 5.12 Software offers usability improvements, resolved issues, and the new capabilities described below.

New in 5.12 Documentation

■   Click the 5.12 Guides button at the top of the page to visit the new Documentation Library for all PDF downloads and access to additional resources.
■   The API Reference Guide is now available online including APIs and sample output and examples for GigaVUE-FM and GigaVUE-VM APIs as well as Ansible examples provided using the same accessible reference style.

Product Area

Feature Summary

Documentation (Online and PDF)

Cloud

Customer Orchestration of Traffic Acquisition

You can now configure GigaVUE Fabric Components (G-vTAP Controllers and G-vTAP Agents) through an external orchestrator like AWS EC2. The deployed fabric components can be monitored from GigaVUE-FM for traffic acquisition. You can deploy G-vTAP Agents only on Linux platforms.

GigaVUE Cloud Suite for AWS:

● Configure GigaVUE Fabric Components in AWS
● GigaVUE Cloud Suite for AWS Guide

V Series Support for External Load Balancers

You can now configure load balancers in your platform to acquire traffic directly from the target VMs and load balance them to the V Series 2 nodes with auto-scaling.

GigaVUE Cloud Suite for AWS:

● Configure an External Load Balancer
● GigaVUE Cloud Suite for AWS Guide

GCB for Service Mesh and HTTPS/2

Now the GCB for Service Mesh and HTTPS/2 allows you to use VXLAN tunnel, additional debug capability, mTLS secure authentication, and certificate rotation.

You can also configure GCB on your environment through GigaVUE-FM GUI.

Gigamon Containerized Broker for Service Mesh and HTTPS/2 Support with Metadata:

● Configure mTLS Authentication
● Configure GCB for Service Mesh and HTTPS/2 Support with Metadata through GigaVUE-FM GUI
● Gigamon Containerized Broker Configuration Guide

V Series 2 on AWS GigaSMART: Adaptive Packet Filtering

Adaptive Packet Filtering (APF) GigaSMART application is now available for V Series 2 solution on AWS monitoring session configuration.

GigaVUE Cloud Suite for AWS:

● Create a New Map
● GigaVUE Cloud Suite for AWS Guide

V Series 2 on VMware GigaSMART: Adaptive Packet Filtering

Adaptive Packet Filtering (APF) GigaSMART application is now available for V Series 2 solution on VMware monitoring session configuration.

GigaVUE Cloud Suite for VMware:

● Create a New Map
● GigaVUE Cloud Suite for VMware—GigaVUE V Series Guide

GigaVUE-FM Core

Fabric Health Analytics

With Fabric Health Analytics allows you can:

● View the system dashboards and visualizations
● Clone the existing system dashboard and create custom dashboards
● Create custom visualizations based on system visualizations
● Use Refresh Index Patterns to add the newly added fields in the visualizations

Fabric Management:

● Fabric Health Analytics (BETA)
● GigaVUE Fabric Management Guide

Topology Visualization

GigaVUE-FM creates Smart Layout Topology for smaller deployments in which the number of nodes is less than 50. The page also allows you to view the following:

● View Consolidated Links
● Use Filters to filter the devices
● Customize the colors for the links

Fabric Management:

● Topology Visualization (BETA)
● GigaVUE Fabric Management Guide

GigaVUE-FM HA on OpenStack

GigaVUE-FM HA is deployed in an OpenStack environment to provide uninterrupted services to the customers. You must configure external IP address while forming the HA cluster.

Fabric Management:

● Configure GigaVUE‑FM High Availability in OpenStack Environment
● GigaVUE Administration Guide

Batch Notifications

With Batch Notification, you can:

● Configure the events to be notified instantly or in batches depending on the configuration in the Notifications Page.
● Configure the prefix for the emails generated by GigaVUE‑FM.

GigaVUE Administration:

● Notifications
● GigaVUE Administration Guide

GigaVUE-FM UI Reorg

The following changes have been incorporated as part of Release 5.12.00:

● List of recently visited pages has been added.
● Find option is added to enable quick navigation to the pages.

Note:  Classic view is disabled. You can view only the new Graphical User Interface of GigaVUE‑FM.

Fabric Management:

● Find Pages
● GigaVUE Fabric Management Guide

GigaSMART Security

 

Resilient Inline Arrangement with GigaSMART Flex Inline Solution

A Resilient Inline Arrangement (RIA)can now support GigaSMART Flex Inline solution. RIA utilizes port hashing to route traffic from network interfaces to the nodes. The configured Inline-SSL policy will decide if the session will be either decrypted or not decrypted and then will forwarded it to the inline-tool for inspection.

 

Fabric Management:

● Resilient Inline Arrangement with GigaSMART Flex Inline Solution
● GigaVUE Fabric Management Guide

Trust Store Update

With software version 5.12.xx, the default iSSL trust stores have been updated from Mozilla Firefox.

 

GigaVUE Administration:

● Trust Store
● GigaVUE Administration Guide

Software Licensing

GigaVUE‑OS and GigaVUE‑OS Module License

Gigamon hardware devices can be now manufactured with or without a software license:

  • Fully-licensed devices (integrated devices)
  • Hardware-only licensed devices (suffixed with "-HW" in the hardware type)

The following software licenses must be installed in the hardware-only licensed devices for the chassis and the modules to be active and operational:

  • GigaVUE‑OS License
  • GigaVUE‑OS Module License

GigaVUE Administration:

● GigaVUE‑OS License and GigaVUE‑OS Module License
● GigaVUE Administration Guide

 

GigaVUE-OS

GigaSMART Service Chaining

You can combine GigaSMART applications as part of a single GigaSMART operation to perform series of GigaSMART operations on the incoming traffic before sending it to the tool port. In the transit-level map you can interconnect different v-ports to chain the operations as required.

Fabric Management:

● Flow Map Syntax and Construction
● GigaVUE Administration Guide

GigaVUE-OS CLI Reference:

● map
● GigaVUE-OS CLI Reference Guide

Mobility

 

 

Subscriber-Aware Metatdata Phase 2

In Subscriber-Aware Metadata (SAM) Phase 2, the metadata of subscriber activities are extracted and exported to the Data Collection Center in JSON or AVRO format.

The exporter sends the final SAM records to the destination using file transfer or KAFKA bus.

Refer to GigaVUE Fabric Management Guide for more information about the supported metadata export formats. Refer to Application Aware Metadata Data Sheet (PDF) for ordering requirements .
● Subscriber-Aware Metadata (BETA)
● GigaVUE Fabric Management Guide
● Application Aware Metadata Data Sheet (PDF)

Nokia AVA Support

Nokia AVA Predictive Video Analytics (PVA) offers powerful video analytics for providing real-time insights into mobile over-the-top (OTT) video traffic to enable actions to be taken to improve user experience. Gigamon Visibility and Analytics Fabric™ (VAF) enhances the solution by acquiring and correlating copies of the 3G/4G or 5G user traffic from the mobile core network, generating video session data records and forwarding these records to Nokia AVA for analysis. Refer to this Joint Solution Brief to learn about this partnership and solution.

A VDR License for Nokia AVA is required. Refer to Application Aware Metadata Data Sheet (PDF) for ordering requirements .
● Joint Solution Brief: Optimizing Subscriber Quality of Experience for Mobile Video with Nokia and Gigamon
● Application Aware Metadata Data Sheet (PDF)

Improved Overlap Mode

GTP Overlap Flow Sampling for 4G and 5G provides overlap flow sampling mode for second level maps. In this mode, it replicates the second level map before combining GTP whitelisting and GTP flow sampling maps into a GTP overlap flow sampling map group. The multiple copies of a GTP packet are sent to multiple destinations simultaneously.

However, the traffic is also evaluated by subsequent maps and if there is a match it is sent to each of the destinations pointed to by the subsequent maps.

The destination could be a single tool port, a GigaStream or an IMSI based load balanced tool port/GigaStream for a particular tool set. The GigaStream sends traffic to various links, connected to an external load balancer that would be connected to multiple tools.
● GTP Overlap Flow Sampling for 4G and 5G
● GigaVUE Fabric Management Guide

Multiple forward list support per gsgroup

This feature enables the configuration of multiple forward lists per GigaSMART Group.

Fabric Management:

● GigaSMART GTP Whitelisting and GTP Flow Sampling

GigaVUE Fabric Management Guide

GigaVUE-OS CLI Reference:

● map
● GigaVUE-OS CLI Reference Guide

GigaVUE Software v5.11.00 offers usability improvements, resolved issues, and the following new capabilities.

New in 5.11 Documentation

■   The following book titles changed to reflect how they encompass features and activity that spans GigaVUE-OS and GigaVUE-FM products:
o   GigaVUE-FM User's Guide changed to GigaVUE Fabric Management Guide
o   GigaVUE-FM and GigaVUE-OS Administration Guide changed to GigaVUE Administration Guide
■   The API Reference Guide is now available online including APIs and sample output and examples for GigaVUE-FM and GigaVUE-VM APIs as well as Ansible examples provided using the same accessible reference style.
■   Click the 5.12 Guides button at the top of the page to visit the Documentation Library site for all PDF downloads.

Table 1: New feature reference table v5.11.00

Product Area

Epic Title Feature Summary

Online Topic

PDFs

Cloud

V Series 2 on OpenStack

This feature is replacing the existing V Series 1 node with V Series 2 node for better efficiency and accessibility on OpenStack environments. With the V Series 2 based solution, you can create ingress tunnels and use Dedup and Load balancing applications in Monitoring Sessions.

GigaVUE Cloud Suite for OpenStack:

● Minimum Compute Requirements
● Create Monitoring Domain
● Configure GigaVUE Fabric Components
● This chapter describes how to setup ingress and egress tunnel, maps, applications in a monitoring session to receive and send traffic to the GigaVUE V Series node. It also describes how to filter, manipulate, and send the traffic from the V Series node to monitoring tools.
● GigaVUE‑FM automatically collects inventory data on all target instances available in your cloud environment. You can design your monitoring session to include or exclude the instances that you want to monitor. You can also choose to monitor egress, ingress, or all traffic.
●  
● Create a New Map
● Slicing
● To deploy the monitoring session:

GigaVUE Cloud Suite for OpenStack Guide

V Series 2 on AWS

This feature is replacing the existing V Series 1 node with V Series 2 node for better efficiency and accessibility on AWS environments. With the V Series 2 based solution, you can create ingress tunnels and use Dedup and Load balancing applications in Monitoring Sessions.

GigaVUE Cloud Suite for AWS:

● Create a Monitoring Domain
● Configure GigaVUE Fabric Components in GigaVUE-FM
● GigaVUE‑FM automatically collects inventory data on all target instances available in your cloud environment. You can design your monitoring session to include or exclude the instances that you want to monitor. You can also choose to monitor egress, ingress, or all traffic.
●
● Create a New Map
● Slicing
● To deploy the monitoring session:

GigaVUE Cloud Suite for AWS Guide

V-Series 2 accept L2GRE tunnel packets from Nuage

You can now use the tunnels as source point (Ingress Tunnel) in V Series 2 monitoring session configurations.

GigaVUE Cloud Suite for VMware > AWS > OpenStack:

●  

GigaVUE Cloud Suite for VMware—GigaVUE V Series Guide

GigaVUE Cloud Suite for OpenStack Guide

GigaVUE Cloud Suite for AWS Guide

V-Series 2 5-Tuple Load Balancing

Load Balancing application is now available in V Series 2 monitoring session configuration. You can perform stateless distribution of the packets between different endpoints.

GigaVUE Cloud Suite for VMware > AWS > OpenStack:

● Slicing

GigaVUE Cloud Suite for VMware—GigaVUE V Series Guide

GigaVUE Cloud Suite for OpenStack Guide

GigaVUE Cloud Suite for AWS Guide

Gigamon Containerized Broker: Phase 2

You can now deploy Gigamon containerized broker in service mesh and HTTPS/2 support with metadata. The packets are filtered with GCB metadata filters and tunneled directly to the tools or through the V Series 2 node configured on OpenStack. You can now view the GCB specifications in GigaVUE-FM GUI.

Gigamon Containerized Broker:

● GCB for Service Mesh and HTTPS/2 Support with Metadata

Gigamon Containerized Broker Guide

GigaVUE Cloud for V Series 2 node upgrade on VMware ESXi platform

From GigaVUE-FM 5.11, you can now upgrade any V Series v2.0.x to v2.1.0 or above. Previously, you could only deploy and undeploy V Series nodes; now you can upgrade them.

Prerequisite: GigaVUE-FM must be a fresh install of GigaVUE-FM v5.11 or an upgrade from v5.10.02.

Limitations: This upgrade functionality is only supported for V Series nodes deployed using DHCP. Nodes deployed using static IP are not supported for this upgrade. Upgrades are not supported for nodes deployed in the NSX-T platform.

 

Forthcoming in the GigaVUE Cloud Suite for VMware—GigaVUE V Series Guide

Flexible Inline Arrangement

Heartbeat support between GIMO boxes

The heartbeat (HB) capability is now extended to the distribution layer where the GigaVUE node will be able to detect the heartbeat and pass it back to the inline network port on which it was received. In addition, the extended heartbeat capability focuses on identifying and reporting the health status of the GigaVUE nodes that act as a tool.

Fabric Management:

● About Heartbeats
● About Inline Networks
● About Inline Tools
● Configure Inline Network Ports and Inline Network
● Configure Inline Tool Ports and Inline Tools

GigaVUE-OS CLI Reference:

● inline-network
● inline-tool

GigaVUE Fabric Management Guide

GigaVUE-OS CLI Reference Guide

Stats for Quick Inline Troubleshooting

You can now show or hide the Rx/Tx rate in the Flexible inline canvas for the components that are part of the flexible inline flow deployment.

Fabric Management:

● Troubleshoot Flexible Inline Flows
● View the Forwarding States of Inline Networks

GigaVUE-OS CLI Reference:

● show
● ib-pathway
● inline-tool-group
● inline-tool
● inline-serial
● inline-network-group
● inline-network

GigaVUE Fabric Management Guide

GigaVUE-OS CLI Reference Guide

GigaSMART Security

Display additional passive SSL session details in CLI, FM and flow-ops report file

You can now view the session summary and session statistics for the Flow Ops report for passive SSL and export the report to a remote server.

Fabric Management:

● GigaSMART Passive SSL Decryption
● Definitions of GigaSMART Statistics

GigaVUE-OS CLI Reference:

● apps ssl

GigaVUE Fabric Management Guide

GigaVUE-OS CLI Reference Guide

Display Keystore information for Passive SSL tab, similar to inline SSL

You can now set up keystore certificate management and view the keystore details for passive SSL.

Fabric Management:

● GigaSMART Passive SSL Decryption

GigaVUE Fabric Management Guide

iSSL decryption for one-armed Layer 3 inline tools

The Inline SSL policy profile now supports the following two options:

Tool Early Engage - Supports the inline tools to change the MAC address or VLAN IDs when the client traffic is sent back to the server in a layer 3 topology.

One-Arm Mode - Supports both the client and server traffic to travel through the same physical link or logical aggregate port channel.

Fabric Management:

● Policy Profile Options
● Configure Flexible Inline Decryption Solution
● Configure Inline SSL Decryption Using GigaVUE‑FM

GigaVUE-OS CLI Reference:

● apps inline-ssl

GigaVUE Fabric Management Guide

GigaVUE-OS CLI Reference Guide

Split Proxy - phase 1

You can now enable the Split Proxy settings for your inline SSL policy profile. The TLS connection between the server and client is divided into two independent connections and the security parameters are kept separate.

Fabric Management:

● Configure Flexible Inline Decryption Solution
● Configure Inline SSL Decryption Using GigaVUE‑FM

GigaVUE-OS CLI Reference:

● apps inline-ssl

GigaVUE Fabric Management Guide

GigaVUE-OS CLI Reference Guide

GigaVUE-FM Core

Fabric Health Analytics - Phase 1 (BETA)

Fabric Health Analytics (FHA) in GigaVUE-FM is a standalone service that provides analytical and data visualization capabilities for the physical, virtual and cloud resources.

Using FHA you can create visual elements such as charts and maps that are embedded as widgets and dashboards. FHA uses the Kibana front-end application to visualize and analyze the data in the Elasticsearch database of GigaVUE-FM.

Fabric Management:

● Fabric Health Analytics (BETA)

GigaVUE Fabric Management Guide

GigaVUE-FM High Availability SSO

Single Sign-on for GigaVUE-FM High Availability allows connectivity of the GigaVUE-FM instances in a High Availability group. With GigaVUE-FM HA SSO, if you login to the active GigaVUE-FM instance, the standby instances are also logged in automatically.

Fabric Management:

● Single Sign-on for GigaVUE‑FM High Availability

GigaVUE Administration Guide

RBAC and Tagging enhancements for Alarms

GigaVUE-FM now allows you to view the alarms in the Alarms page based on the following RBAC permissions:

User Roles : User role defines permission for users to perform any task or operation in GigaVUE- FM or the devices.

User Defined Tags : Tags control the way you access the resources such as clusters, ports, port groups, port pairs, GigaSMART groups, GigaStreams and maps.

Fabric Management:

● Alarms

GigaVUE Administration Guide

Topology Visualization Enhancements (BETA)

The Topology Visualization Beta page provides enhanced visualization of the nodes, thereby improving the usability of the page. The nodes are not shown in a single topology view but are grouped based on pre-defined tags.

For example, the nodes are grouped based on: Placement: Location of nodes such as region, state, city, datacenter. Nature of deployment: Aggregation nodes, leaf nodes, spine nodes.

Fabric Management:

● Topology Visualization (BETA)
● Topology Visualization (BETA)

GigaVUE Fabric Management Guide

GigaVUE-FM Horizontal Scale to Support 2 times than the Standalone FM

With this enhancement, GigaVUE-can manage approximately 2000 nodes. Horizontal scale support is applicable only in GigaVUE-FM High Availability mode. Horizontal scale support involves service distribution to the standby nodes.

The following changes in done in GigaVUE-FM for providing a scalable environment:

● Access GigaVUE-FM Active Instance in case of Failover: Allows you to access the GigaVUE-FM instances even in case of failovers by providing the following options:
o Use Load Balancer
o Assign a DNS Name for the  instances
o Use a Virtal IPaddress when all three GigaVUE-FMInstances are within the same subnet.
o Stack Escape Changes: Involves removing standalone GigaVUE-nodes that are deleted from the cluster by the user. Other associated behavioral changes when adding, editing, removing nodes from a cluster.
● Syslog Enhancements: Option to not have GigaVUE-FM as the default syslog server, and instead use other external syslog servers.
● SNMP Trap Processing: SNMP traps are not processing in certain scenarios
● You can now add a secondary IP address in addition to the primary IP address.

Fabric Management:

● Health Monitor Dashboard
● Rules and Recommendations for Nodes and Clusters
● Preferences
● Storage Management
● Access GigaVUE-FM Active Instance in case of Failover

GigaVUE Fabric Management Guide

GigaVUE Administration Guide

GigaVUE-OS

Secure Syslog - Anonymize, mask or remove sensitive data from Logs

You can now mask the IPv4, IPv6, and MAC addresses contained in the log files.

GigaVUE-OS CLI Reference:

● logging

GigaVUE-OS CLI Reference Guide

Sysdump support for member node

You can now generate the system dump files for all the nodes that are part of a cluster by logging into the leader. However, to download the system dump file for a node, you must log in to the respective node.

GigaVUE Administration:

● Generate Sysdump or Debug Dump File

GigaVUE-OS CLI Reference:

● debug

GigaVUE Administration Guide

GigaVUE-OS CLI Reference Guide

Hardware

PRT-HC1-Q04X08 Module

A new line card  PRT-HC1-Q04X08 which consists of four (4) 40Gb QSFP+ ports and eight (8) 1GB/10Gb SFP/SFP+ ports have been introduced.This module increases the port density and allows GigaVUE-HC1 to connect with GigaVUE-TA Series and  GigaVUE HC Series nodes with higher-speed (40Gb) links.

Hardware :

● PRT-HC1-Q04X08 Module

GigaVUE-HC1 Hardware Installation Guide

Battery Optimization of G-TAP A Series 2 through CPU Hibernation

G-TAP A Series 2 can be configured to hibernate and wake up periodically so that the battery power usage is optimized

Hardware:

● Battery Optimization through CPU Hibernation

GigaVUE-OS CLI Reference:

● battery optimization global

(Undefined variable: guideVar.Guide-GTAP-A-Series)

GigaVUE-OS CLI Reference Guide

Intent-Based Orchestration

Full support for YAML-based Orchestration

You can now import and export an orchestrated policy in YAML format. This allows you to bulk deploy the policies.

Fabric Management:

Import and Export Orchestrated Policies

GigaVUE Fabric Management Guide

Integration with Alarms Framework

GigaVUE-FM generates alarms to track the changes in the health status of the orchestrated policies.

Fabric Management:

Alarms

GigaVUE Fabric Management Guide

Support for Egress Filters

You can now apply egress filters provide additional filtering capabilities on tool ports and hybrid ports in a policy. Egress filters are used to pass or drop the traffic and can be combined logically using 'AND' and 'OR' operators.

Fabric Management:

Egress Filters for Additional Filtering Capabilities

GigaVUE Fabric Management Guide

Mobility

Subscriber-Aware Metadata

The Subscriber-Aware Metadata (SAM) feature produces the subscriber-level network activity that is useful for analytics. The data is created across a set of high-value dimensions in terms of:

● Subscriber session
● Over-the-top application
● Handset type
● Location (cell)
● Service QCI/QoS

The metadata of subscriber activities is extracted using GTP or 5G correlation and Application Metadata Intelligence (AMI) modules of the Gigamon’s Network Visibility nodes. After extraction, the following information is correlated and merged by Sub-Metadata Aggregator Function (SMAF) server and sent to the Data Collection Center:

● Extracted metadata information
● Transaction event records
● Application Metadata Intelligence flow records

SAM feature is supported in:

● Control and User Plane Separation (CUPS) solution
● Non-CUPS solution

In both the solutions, the feature is supported in both no engine and engine grouping model. GigaVUE-FM is the centralized configuration manager for SAM that is deployed across multiple nodes in a network.

Fabric Management:

● Subscriber-Aware Metadata (BETA)

GigaVUE Fabric Management Guide

GigaVUE Software v5.10.01 is the initial GA release of 5.10.xx. This release offers usability improvements, resolved issues, and the following new capabilities.

Prior to this release, GigaVUE-OS v5.10.00 was released as embed software on new hardware platforms, exclusively. For more about 5.10.00, see GigaVUE-OS on DELL S4112F-ON.

Table 2: New feature reference table v5.10.01

Area

Feature

Topic Link

PDF Guide

Threat Detection

SMT-HC1-S (GigaVUE-HC1 Gen 3 module with ThreatINSIGHT Sensor support)

GigaVUE-HC1 supports a Generation 3 GigaSMART card (SMT-HC1-S), which gives 80Gb throughput and can be used to provide the ThreatINSIGHT solution for security detection.

Hardware:

SMT-HC1-S (Gen 3 GigaSMART Card)

GigaVUE-HC1 Hardware Installation Guide

Gigamon ThreatINSIGHT Sensor

Gigamon ThreatINSIGHT is a SaaS-based network security monitoring platform built with the ability to detect, respond, and investigate network-based threats. You can also deploy Gigamon ThreatINSIGHT Sensor on the GigaVUE-HC1 SMT-HC1-S module using GigaVUE-FM. It provides single, integrated security solution for threat-detection.

Fabric Management:

Gigamon ThreatINSIGHT Sensor

Fabric Management:

Supported GigaSMART Operations

GigaVUE-FM User’s Guide

Fabric Maps

Fabric Port Group

Extends GigaSMART load balancing functionality to fabric maps using circuit ids and circuit tunnels, thus allowing load balancing between tool ports that reside on different clusters.

Fabric Management: Fabric Port Group

GigaVUE-FM User’s Guide

Flexible Inline Arrangement

Resilient Inline Arrangement with Single VLAN Tag

Deploy resilient inline arrangement with a single VLAN tag in which, a packet received from an inline network is guided to the inline tool using a single VLAN tag, which is configurable when creating a flexible inline map.

Fabric Management: Configure Resilient Inline Arrangement

GigaVUE-FM User’s Guide

GigaVUE-OS

Microburst Enhancements

The Microburst performance in GigaVUE-OS devices have been improved such that devices have some amount of buffer to queue these packets.

Fabric Management: Microburst

GigaVUE-FM User’s Guide

High and Low Utilization for GigaSMART Engine Ports

GigaSMART engine ports now use high and low utilization threshold percentage. The utilization alarms will be forwarded to SNMP management stations configured as notification destinations.

Fabric Management: Set Port Utilization Thresholds

CLI Reference: portsnmp-server

GigaVUE-FM User’s Guide

GigaVUE-OS CLI Reference Guide

Port Filter Statistics Enhancements

View the port filter counters based on the filter rules configured for the port.

Fabric Management: Port Filters

CLI Reference: port

GigaVUE-FM User’s Guide

GigaVUE-OS CLI Reference Guide

New Active Visibility Conditions and Actions for Inline Tool Groups

You can now configure Active Visibility policies using conditions and actions that are newly added for inline tool group and flexible inline maps.

Fabric Management: Configure Active Visibility

CLI Reference: policy

GigaVUE-FM User’s Guide

GigaVUE-OS CLI Reference Guide

Intent-Based Orchestration

Intent Based Orchestration Enhancements:

● Multicluster Topology Support: Allows to create policies in which the source ports, the destination ports and the engine ports are configured across clusters.
● Hybrid Port Support: Allows to use hybrid ports in a policy as both source ports and destination ports.
● Tagging and RBAC Support: With RBAC, the accessibility of the users to the policies is restricted based on the tags.
● Drop Rules: With Drop Rules packets can be either dropped or passed based on the usage with other pass rules or Everything Else.

Fabric Management: Orchestrated Configurations

GigaVUE-FM User’s Guide

Mobility

GigaSMART TCP Enhancements

In 5G traffic, the GigaSMART TCP load balancing is performed based on the following correlations:

● SIP/RTP Correlation - All the SIP/RTP traffic with port or load balancing port group is forwarded based on the session table. The correlation engine load balancing keeps track of both the SIP session and the associated multiple RTP channels.
● 5G Correlation - If the node role is CPN, the load balancing of the packets depends upon the parameters configured for TCP.

Fabric Management:

● GigaSMART SIP/RTP Correlation
● GigaSMART SIP/RTP Correlation

GigaVUE-FM User’s Guide

GigaSMART 5QI Correlation

In 5G traffic, 5QI values present in the control traffic and its associated QoS Flow Identifiers (QFI) value are correlated and the data traffic is sent to the tools.

Fabric Management: GigaSMART 5QI

GigaVUE-FM User’s Guide

Enhanced Application Session Filtering (ASF)

Enhanced Application Session Filtering allows to filter a specific application field from the incoming traffic. Enhanced Application Session Filtering supports the following session capabilities:

● Application SSL – Supports SNI field in a hello packet.
● HTTP – Supports HOST and User-agent field in a request packet.

Netflow Cacheless export using TCP

NetFlow monitor enables you to set the cache timeout to zero and makes the NetFlow to operate in a cacheless mode. Each packet received by the NetFlow is treated as a complete flow and the metadata extracted from the packet are immediately exported without caching the flow. In cacheless mode, the metadata are direclty sent to the export buffer as they are not copied to the cache, thereby providing more record space.
● GigaSMART Application Session Filtering (ASF) and Buffer ASF
● GigaSMART NetFlow Generation

GigaVUE-FM User’s Guide

GigaSMART Standalone User Plane Node Traffic Monitoring

In Standalone User Processing Node (UPN) traffic monitoring, the UPN processes the subscriber information that is extracted from the Packet Forwarding Control Protocol (PFCP) packets and correlates with the GTP-u traffic without the CPN.

Fabric Management: Stand-Alone User Plane Node Traffic Monitoring

GigaVUE-FM User’s Guide

GigaSMART 5G Network Slice Correlation

Network Slicing is a feature of 5G networks whereby slices of network resources are dedicated to a specific application. Gigamon enables customers to have differentiated levels of visibility for each network slice.

Fabric Management: 5G Network Slice Correlation

GigaVUE-FM User’s Guide

GigaSMART RAN Correlation

This feature enables the support for RAN based correlation for both 4G CUPS and 5G CUPS solutions. The monitoring of core traffic is based upon the RAN source. It exposes RAN data fields from control plane. RAN data fields are available for filtering and whitelisting.

Fabric Management: 5G RAN Correlation

GigaVUE-FM User’s Guide

 

Enhancements to 5G CUPS Configuration using Ansible

The Gigamon Ansible Module exposes playbooks that allows the configuration and maintenance of the CUPS solution, and the GigaVUE-FM GUI allows you to visualize, monitor and troubleshoot the CUPS solution.

Fabric Management: Configuration of CUPS using Ansible.

GigaVUE-FM User’s Guide

FM Core

Information Architecture and GUI Reorganization

Improved and modernized user experience. Ease of accessibility of the physical and virtual nodes and the solutions.

Fabric Management:

GigaVUE-FM User’s Guide

Alarms for Inline Networks and GigaSMART Operations

Alarms to track the changes in the health status of the inline network configurations and the GigaSMART Operations.

● RBAC Enhancements for Events, and Audit Logs
● Filter Audit Logs and Events based on RBAC tags
● Archive, Purge Audit Logs and Events based on RBAC tags

Administration

● Alarms for GigaVUE‑FM Configurations
● View Events based on User's RBAC Persmissions
● Archive or Purge Event Records
● Archive or Purge Audit Log Records

GigaVUE-Administration Guide

GigaVUE-FM Scale Enhancements

Provides a reliable and stable environment for managing large number of physical devices without any impact to the performance. Includes the following changes:

● Health computation of devices and ports in an optimized way
● Enhancement to Flows with option to enable through GUI
● Determining Traffic health state using SNMP traps
● Backup/Restore changes

Fabric Management:

● Health Status
● Flows

Administration:

● SNMP Traps
● Backup/Restore

GigaVUE-FM User’s Guide

GigaVUE-Administration Guide

Security

Protocol Signature Enhancements

Upgrade the protocol signature by upgrading the image file on the card, and by uploading the GigaSMART card image to GigaVUE-FM from the Internal Server or External Server.

Fabric Management:

Create an Application Intelligence Session

GigaVUE-FM User’s Guide

Software Licensing

Volume based licensing for V Series on VMware

Volume-Based License (VBL) is introduced to support V Series for VMware virtual device environments. In this model, instead of being assigned to a specific physical chassis or GigaSMART card, your license is based on the volume of data usage across many virtual devices gathered per available statistics collected in GigaVUE FM. The data measured is the raw ingress traffic on V Series nodes, GCB/GvTAP devices and licensed apps such as masking, slicing, and de-duplication on V Series nodes. With VBL you can also monitor and analyze your data usage daily, within specific service periods, or spanning multiple service periods.

Note:  If you are using Volume Based Licensing, please make sure that smtp.gmail.com access on port 25 of the GigaVUE-FM host machine is not blocked by firewall ACL (Access Control List) rules or a proxy server. If it is blocked, it will prevent GigaVUE-FM from sending the mandatory emails regarding volume usage to Gigamon at the end of each collection period (normally 3 months).

GigaVUE Cloud Suite:

All the V Series 2 nodes connected to GigaVUE-FM reports the stats. All licensed applications, when running on the node, generate usage statistics. In the Volume-Based Licensing scheme, a license entitles specific applications on your devices to use a specified amount of total data volume over the term of the license. The distribution of the license to individual nodes or devices becomes irrelevant for Gigamon’s accounting purpose. GigaVUE-FM tracks the total amount of data processed by the various licensed applications and provides visibility into the actual amount of data, each licensed application is using on each node, and track the overuse if any. You will have grace period for each license that are conveyed in the license file.

GigaVUE Cloud Suite Guides for AWS , OpenStack, and GCB

GigaSMART Security

RFS Configuration to Manage Encrypted Keys

Use Remote File System (RFS), a component in HSM to store and manage encrypted keys

Fabric Management:

Entrust nShield HSM for SSL Decryption for Out-of-Band Tools

CLI Reference :

apps hsm-group

GigaVUE-FM User’s Guide

GigaVUE-OS CLI Reference Guide

Split DNS Profile Configuration for GigaSMART Engine Port

Configure separate DNS servers for internal and external networks to ensure better security and privacy management

CLI Reference:

● apps split-dns
● gigasmart

GigaVUE-OS CLI Reference Guide

Cloud

Network visibility with V Series nodes on VMware ESXi and NSX‑T

This feature is replacing the existing GVMs with V Series 2 fabric node for better efficiency and accessibility on VMware environments. With the V Series based solution, users can create Monitoring Session instead of configuring vMaps and use Automatic Target Selection instead of manual vNIC selection in VMware ESXi and NSX-T.
● Configure V Series Node on ESXi
● Configure GigaVUE-VM on NSX-T

GigaVUE Cloud Suite for VMWare Configuration Guide

Gigamon Containerized Broker GCB

Gigamon Containerized Broker (GCB) is a containerized packet broker component of Gigamon. GCB provides the network broker features in a containerized form for the customers who are running their workloads in containers. GCB can perform traffic acquisition, aggregation, basic filtering, replication, and tunneling with encryption support.

Gigamon Containerized Broker

Gigamon Containerized Broker Configuration Guide

 

GigaVUE-OS 5.10.00 offers usability improvements, resolved issues, and the following new capabilities.

Table 3: New feature reference table v5.10.00

Product Area

Feature

Online Topic

PDF Guide

Ref

Software

GigaVUE-OS on DELL S4112F-ON

Introducing the GigaVUE‑TA25 Chassis

GigaVUE-OS on DELL S4112F-ON Installation Guide

HD-57727

Hardware

GigaVUE-TA25

Introducing the GigaVUE‑TA25 Chassis

GigaVUE-TA Series Hardware Installation Guide

HD-56397

GTAP-A SF21

G-TAP A Series 1    

GigaVUE-OS CLI Reference: battery, battery optimization

G-TAP A Series 2 Hardware Installation Guide: G-TAP   

GigaVUE-OS CLI Reference Guide: battery, battery optimization

HD-58040

GigaVUE-OS on DELL S4112F-ON

The GigaVUE-OS is now installable on the commercial off-the-shelf (COTS) DELL S4112F-ON power switch. This integration allows the DELL S4112F-ON, with 12 1Gb/10Gb SFP+ and three 40Gb/100Gb QSFP28 ports, to run GigaVUE-OS with its core intelligence visibility node features and functionalities – all in a 1RU half rack-width form factor. Adding the Advanced Feature License enables clustering, tunneling, and header stripping.

(Reference: HD-57727)

Documentation: Refer to GigaVUE-OS on Dell S4112F-ON or the GigaVUE-OS on DELL S4112F-ON Installation Guide.

GigaVUE-TA25

The GigaVUE-TA25 is the latest member of the GigaVUE-TA Series. It has 48 ports of 1/10/25Gb and 8 40/100Gb in a 1RU form factor. The Advanced Feature License enables clustering, tunneling, and header stripping.

(Reference: HD-56397)

Documentation: Refer to Introducing the GigaVUE‑TA25 Chassis or the GigaVUE-TA Series Hardware Installation Guide

G-TAP A Series 2

The G-TAP A Series 2 comprises active network taps that mirror 100% of network traffic, implement the “Always-On” architecture, and have increased density (8 TAPs in 1RU) and improved security (SSH and SNMPv3). This release introduces the following additional products in this series:

■   G-TAP-ASF21: The G-TAP A-SF2 SFP+ network TAPs run the same GigaVUE-OS as the GigaVUE TA Series and HC Series devices, and can be managed via CLI over SSH or by GigaVUE-FM. Unlike G-TAP A-TX2, the G-TAP A-SF21 supports SFP/SFP+ ports.
■   G-TAP-ATX21-C: The G-TAP A-TX2 copper network TAPs run the same GigaVUE-OS as the GigaVUE TA Series and HC Series devices, and the G-TAP-ATX21 model can be managed via CLI over SSH or by GigaVUE-FM. The G-TAP-ATX21-C model looks and works just like G-TAP-ATX21 except the Ethernet management port is disabled and can only be managed via the console port.

(Reference: HD-58040)

Documentation: Refer to G-TAP A Series 1 or the G-TAP A Series 2 Hardware Installation Guide.