What's New

Cloud

Support for V Series Node deployment using VMware NSX-T Manager

You can now deploy V Series Nodes through VMware NSX-T Manager. The deployed V Series Node can be monitored from GigaVUE-FM for traffic acquisition, processing and forwarding.

Supported GigaSMART operations on Microsoft Azure

GigaVUE Cloud Suite for Azure support the following GigaSMART Application Intelligence operations.

Embedded

Supported GigaSMART features on the 400G Link Traffic Aggregator

The GigaVUE-TA400 product consists of a 1RU, rack-mountable, 32 x 400G QSFP-DD/QSFP28/QSFP+ ports, dual hot-pluggable AC/DC power supplies, seven hot swappable fan modules, a serial console port, and a 10M/100M/1G management port. The following features are supported in 5.15 release such as :

GigaVUE-FM Core

Flow Ops Report Page Display Enhancement

The GigaSMART Report page now displays the report type, GigaSMART Group and the Pattern selected for generating the FlowOps report in the header pane with the time stamp of when the report was generated.

Flow Filtering Reports Usability Enhancement

GigaSMART Flow Filtering reports can now be generated as a single page. The links provided at the top of the report allows you to instantly navigate to the various sections in the report, thus eliminating excessive scrolling. The export button allows you to export the report in excel format with data captured in separate sheets for the different sections of the report.

API: /elasticUtils API

The  /elasticUtils API URL is now public and is available in the GigaVUE-FM swagger.

Documentation

This guide includes implementation information needed to get started with the GigaVUE-FM Hardware Appliance as a new, upgrading, or migrating customer.

Command Line Summary

This document summarizes the commands available in the command-line interface for the GigaVUE H Series nodes. Commands are listed in alphabetical order with a summary of their syntax.

Cloud

Customer Orchestration of Traffic Acquisition for Azure

You can now configure GigaVUE Cloud Suite components like G-vTAP Controllers, G-vTAP Agents, and V Series Nodes through an external orchestrator like Azure Portal. The deployed fabric components can be monitored from GigaVUE-FM for traffic acquisition, processing and forwarding.

GCB Log Level Settings

With the GCB Log Level Setting, you can change the log level, modify the GCB log file size, and add miscellaneous log configuration messages for better logging and troubleshooting.

Geneve decapsulation for AWS

You can now choose the Geneve application from the GigaVUE Cloud Suite for AWS Monitoring Session canvas to acquire and strip Geneve headers. To route the traffic through the third-party network appliances seamlessly, the AWS gateway load balancer adds Geneve header to packets as they enter the VPC and strip these headers as the traffic leaves the VPC back into the servers. The third-party network appliances are expected to process traffic with these Geneve headers. When the GigaVUE-FM acquires the customer traffic, the packets are encapsulated in tunnels that are terminated in V Series nodes.

Cloud AMI/AFI Enhancements

You can now deploy multiple GigaVUE V Series nodes in a solution and use V Series Node API Proxy Server (VPS) to scale and manage multiple V Series nodes.

Red Hat certification of GCB on OpenShift

The GCB images are now "Red Hat Certified" for Red Hat OpenShift platform.
The Red Hat supported base images of the GCB applications are built on the top of Red Hat Universal Base Image or Red Hat Enterprise Linux Image.

Supports AWS Outposts

GigaVUE-FM now supports AWS Outposts. AWS Outposts is an on-premises extension of the AWS infrastructure, which allows you to make direct calls direct to AWS services (e.g., S3, EC2) from this solution.

Embedded

Flexible Inline Arrangement is now supported in GigaVUE-TA200

Flexible Inline arrangement functionality is now supported in GigaVUE-TA200. Due to the absence of BPS module and GigaSMART card Physical Bypass and Inline SSL functionality will not be supported. The Inline Bypass Solution(Classic)incompatibility remains same in GigaVUE-TA200.

Support Flexible Inline for Clustered GigaVUE HC Series Nodes

The GigaVUE HC Series nodes that can be now clustered with Flexible Inline solution for the following Flexible Inline features:

Resilient Inline Arrangement

Network Link Aggregation Group (LAG)

Asymmetrical Hashing

Single Tag vs Double Tag VLAN mode for GigaVUE-TA25

GigaVUE-TA25 can now configure the VLAN tag mode to be single tag or double tag at the chassis level. Single tagged mode will be the preferred mode of operation when the deployment environment needs the visibility of just untagged and single-tagged packets.

GigaVUE-FM Core

Topology Visualization enhancements:

• Port Discovery page: Allows bulk configuration of discovery protocols such as GDP, CDP and LLDP.
• Recently Viewed: Provides a list of recently viewed topologies. Click on a link to navigate to the topology.
• Manual Network Nodes and GTAP nodes: New options added in smart layout topology.
• View Option: Option to show and hide the external network nodes and tools.
• Edit Option: Ability to edit the topologies.

Fabric Health Analytics enhancements:

New system dashboards and corresponding visualizations have been added:

• Port Flapping
• GigaSMART Core Crash
• Fabric Map statistics (Physical)
• Port Capacity Planning

Ability to navigate from FHA Alarms and Events dashboards to GigaVUE-FM Alarms and Events pages (with filters applied).​

Fabric Health Analytics for Cloud enhancements:

New system dashboards and corresponding visualizations have been added:

• App(Virtual)
• Tunnel (Virtual)
• End Point Virtual

Enhancement to existing dashboards with the addition of Aggregate Summary panel

• Daily App Usage
• Daily Bundle Usage
• App Usage Summary
• Bundle Usage Summary

Dynamic Increase in GigaVUE-FM HA Instances

Until software version 5.13.00, GigaVUE-FM High Availability group was restricted to one active GigaVUE-FM instance and two standby GigaVUE-FM instances providing a scaled and resilient environment. As GigaVUE-FM is scaled up to manage many number of devices, higher computing and memory resources are required for the following reasons:

• Longer data retention period (up to 13 months).
• Better search performance with more horizontal distribution of Elastic Search for features such as Fabric Health Analytics (FHA), Topology Visualization.
• Better indexing performance with the number of instances collecting various statistics on the configured components.

Therefore, the number of Elastic Search instances has to be increased in the HA group for scalable performance of the various features in GigaVUE-FM. GigaVUE-FM now allows you to add more than three GigaVUE-FM instances to the HA group. You can add any number of instances to the HA group as required.

Port Packet Drop and Error Thresholds
GigaVUE HC series and TA series devices generate SNMP traps for packet drops and packet errors that occurs in the port for both ingress and egress traffic. The traps are sent to GigaVUE-FM based on which alarms are often triggered even for a single packet drop or error. You can now configure threshold values for port packet drop/error based on which the number of traps can be controlled.

Alarm Suppression

GigaVUE- FM allows you to suppress alarms that are raised during maintenance operation of a specific resource, cluster or node. You can suppress an alarm or alarms for a specific period or indefinitely by:

• Suppressing from Alarms page

• Suppressing from Physical Nodes page

You can also configure auto-suppression of alarms for certain GigaVUE-FM triggered operations on device such as Configuration Restore, Device Reboot, Image Upgrade on a cluster or node., and Cluster Creation Operations.

Support SNMP Traps for GigaVUE-FM Alerts

GigaVUE-FM sends SNMP v2c/v3 Trap notification for the GigaVUE-FM events such as Image Upgrade Status, Backup operation Status, etc., to the configured SNMP trap receivers.

GigaSMART

Optimized Elephant Flow processing for AFI

Application Filtering Intelligence detects and handles the elephant flows in the traffic. The feature is supported on the following GigaSMART modules:

• HC1-X12G4
• SMT-HC3-C05
• SMT-HC0-Q02X08

Supported Applications on Gen3 HC3 GigaSMART

The following GigaSMART applications are supported on the new SMT-HC3- C08 module:

• Masking
• Packet Slicing
• De-Duplication
• Adaptive Packet Filtering (APF) –– Supported without RegEX
• Application Session Filtering (ASF)
• Application Filtering Intelligence (AFI)
• Application Metadata Intelligence (AMI)
• GTP Whitelisting –– Non-CUPS GTP Correlation only
• GTP Flow Sampling –– Non-CUPS GTP Correlation only
• Load Balancing (Stateless)
• Load Balancing (Stateful)
• Tunnel Encapsulation
• Tunnel Decapsulation

Hardware

New Gen3 HC3 GigaSMART Module

The SMT-HC3-C08 module is the 3rd generation GigaVUE-HC3 GigaSMART module. This module is compatible only with Control Card version 2 (CCv2) and has two GigaSMART engines which have increased performance over the SMT-HC3-C05 module

New 400G Link Traffic Aggregator

The GigaVUE-TA400 product consists of a 1RU, rack-mountable, 32 x 400G QSFP-DD/QSFP28/QSFP+ ports, dual hot-pluggable AC/DC power supplies, seven hot swappable fan modules, a serial console port, and a 10M/100M/1G management port. The following features are not supported in 5.14 release such as :

Documentation

Inclusive Language Initiative

Gigamon is adopting inclusive language standards and is in the process of updating all of our content to remove exclusionary language wherever it exists, whether that be in Gigamon products and documentation, public-facing marketing materials, or internal communications. As we make these changes, we will announce updates to our terminology in our release notes and product documentation.

For more information, refer to Inclusive Language Initiative.

Cloud

V Series 2 on Azure

This feature is replacing the existing V Series 1 node with V Series 2 node environments with optional V Series Proxy for better efficiency and accessibility on Azure platforms. With the V Series 2 based solution, you can create ingress tunnels, use public IP address types, and use all the V Series 2 supported GigaSMART applications in Monitoring Sessions.

OVS Mirroring for V Series 2 on OpenStack

Now you can only select OVS Mirroring as your Traffic Acquisition Method for both OVS Mirroring and OVS Mirroring + DPDK. GigaVUE-FM can now auto detect and select the OVS Mirroring type required.

Service Identification on GCB

In the Service mesh and HTTPS/2 supported platform, the Pcapper sends HTTPS/2 requests to GCB. On receiving the HTTPS/2 request from Pcapper, GCB applies the rules configured in GigaVUE-FM and forwards the filtered traffic to Tools or V Series 2 Nodes through L2GRE or VXLAN tunnels.

These IP addresses of the Pcapper HTTPS/2 packets are temporary and the services running in multiple Kubernetes clusters can have same IP address. To correlate these ephemeral and same IP addresses, the GigaVUE-FM maps these ephemeral IP addresses with the corresponding source and destination CSV mapping files received from the Service Mesh and HTTPS/2 Supported platform and converts them to the external IPv6 addresses.

Dashboards for Cloud Statistics and Volume Based Licensing

This enhancement introduces the following dashboards and the associated visualizations:

Cloud Enhancements

Supported GigaSMART operations on AWS, OpenStack and VMware

GigaVUE Cloud Suite for AWS and GigaVUE Cloud Suite for VMware support the following GigaSMART Application Intelligence operations in GigaVUE-FM version 5.13.00:

SHA1 support has been removed in 5.13.xx to improve security. Refer to Addendum in the Release Notes v5.13.xx for details.

GigaVUE-FM Core

Fabric Health Analytics BETA

With Fabric Health Analytics, you can view the operational and health status of the various physical and virtual resources through the dashboards and visualizations. With this functionality you can:

The following new dashboards have been introduced:

Topology Visualization Beta

The Topology Visualization Beta page allows you to create tagged layout topology. For smaller deployments, GigaVUE-FM creates Smart Layout Topology.This feature is enhanced as follows:

Bulk Tagging

GigaVUE‑FM allows you to instantaneously,

• Bulk upload a large number of tag keys and tag values
• Assign tags to the resources such as nodes, clusters, ports, and maps.

Use the Import and Export Tags as Resources options in the Tags page to upload a CSV file containing the required fields.

Email Notifications

The Email Notifications functionality is enhanced such that:

• you can now schedule notification of specific events either as instant or digest notifications, depending on the configurations in the Scheduler page.
• send notifications to the permitted list of recipients added to the Permitted Recipients page.
• With the Test Email button in the Email Server page, you can send a test email for confirmation.

GigaVUE-FM UI Reorg

The GigaVUE‑FM GUI is enhanced as follows:

Note:  Save Config option is removed from the top navigation bar and moved under the Chassis option

Rule-level Tagging

You can now associate tags to map rules. Each rule within a map can be associated with different tags Ids and tag values. This is applicable for both flow maps and fabric maps.

The Map Statistics dashboard includes visualizations that allows you to view the statistics of the flow of traffic at the rule level.

GigaVUE‑FM Scale Enhancements

Provides a reliable and stable environment for managing a large number of physical devices (up to 3000 devices) without any impact to the performance.

The following changes are included as part of this release:

Note:  Support for VIP in GigaVUE‑FM High Availability cluster is deprecated from software version 5.13.00. If there is VIP configured in GigaVUE‑FM < release 5.13.00, it will be continued after the upgrade. You will only be able to delete the existing VIP from software version 5.13. You cannot add or update the VIP.

The GigaVUE-FM GUI is enhanced as follows:

• Add New TACACS+ page: ASCII AuthType added as an option.
• Support for entering 64 characters when configuring the password in the GigaVUE-FM GUI.
• 'Control Traffic' checkbox added to pass the GTP Control Traffic to all the GigaSMART engines in a GTP engine group.
• Near-Real Time view in the GigaVUE-FM GUI for the following changes related to Inline Bypass and Inline SSL Decryption:
  • Inline Network Forwarding State updates
  • Inline Tool Operational State and Flex Status
  • Inline Tool Group Operational State and Flex Status

These event-related updates will automatically get reflected in the respective pages. You can also use the Refresh button to view the Near-Real Time updates.

GigaSMART Mobility

Passive SSL Decryption with HSM Support on SMT-HC1-S (Early Access)

The Generation 3 GigaSMART card (SMT-HC1-S), now supports Entrust nShield Hardware Security Module(HSM) integrated with Passive SSL decryption.

Note:  Early Access is a pre-GA feature status indicating it is not recommended for production networks. The functionality has been tested. Little to no system testing has been performed, however, and performance/scale data is not yet available. Preliminary documentation is available.

MAC Address Rewrite

A user can now control or modify the Destination MAC and source MAC address of incoming traffic packets and deliver it to the tools according to the flow mapping configurations.

Support Flexible Inline for Clustered GigaVUE HC Series Nodes

The GigaVUE HC Series nodes can now be clustered with Flexible Inline solution for the configuration path. The traffic path is limited to a single node such that all inline network and tool ports should reside in the same node. The Flexible Inline features that can be configured are as follows:

Flexibility to Configure the PTP VLAN Range

The PTP VLAN ID range has been increased to 2-4000. Hover on the help icon to identify the available VLAN ID resouce.

The GigaVUE Cloud Suite for VMware Guide is now split into two separate guides:

Threat Detection

SMT-HC1-S (GigaVUE-HC1 Gen 3 module with ThreatINSIGHT Sensor support)

GigaVUE-HC1 supports a Generation 3 GigaSMART card (SMT-HC1-S), which gives 80Gb throughput and can be used to provide the ThreatINSIGHT solution for security detection.

Hardware:

SMT-HC1-S (Gen 3 GigaSMART Card)

Gigamon ThreatINSIGHT Sensor

Gigamon ThreatINSIGHT is a SaaS-based network security monitoring platform built with the ability to detect, respond, and investigate network-based threats. You can also deploy Gigamon ThreatINSIGHT Sensor on the GigaVUE-HC1 SMT-HC1-S module using GigaVUE-FM. It provides single, integrated security solution for threat-detection.

Fabric Management:

Gigamon ThreatINSIGHT Sensor

Fabric Management:

Supported GigaSMART Operations

Fabric Maps

Fabric Port Group

Extends GigaSMART load balancing functionality to fabric maps using circuit ids and circuit tunnels, thus allowing load balancing between tool ports that reside on different clusters.

Fabric Management: Fabric Port Group

Flexible Inline Arrangement

Resilient Inline Arrangement with Single VLAN Tag

Deploy resilient inline arrangement with a single VLAN tag in which, a packet received from an inline network is guided to the inline tool using a single VLAN tag, which is configurable when creating a flexible inline map.

Fabric Management: Configure Resilient Inline Arrangement

GigaVUE-OS

Microburst Enhancements

The Microburst performance in GigaVUE-OS devices have been improved such that devices have some amount of buffer to queue these packets.

Fabric Management: Microburst

High and Low Utilization for GigaSMART Engine Ports

GigaSMART engine ports now use high and low utilization threshold percentage. The utilization alarms will be forwarded to SNMP management stations configured as notification destinations.

Fabric Management: Set Port Utilization Thresholds

CLI Reference: portsnmp-server

Port Filter Statistics Enhancements

View the port filter counters based on the filter rules configured for the port.

Fabric Management: Port Filters

CLI Reference: port

New Active Visibility Conditions and Actions for Inline Tool Groups

You can now configure Active Visibility policies using conditions and actions that are newly added for inline tool group and flexible inline maps.

Fabric Management: Configure Active Visibility

CLI Reference: policy

Intent-Based Orchestration

Intent Based Orchestration Enhancements:

Fabric Management: Orchestrated Configurations

Mobility

GigaSMART TCP Enhancements

In 5G traffic, the GigaSMART TCP load balancing is performed based on the following correlations:

Fabric Management:

GigaSMART 5QI Correlation

In 5G traffic, 5QI values present in the control traffic and its associated QoS Flow Identifiers (QFI) value are correlated and the data traffic is sent to the tools.

Fabric Management: GigaSMART 5QI

Enhanced Application Session Filtering (ASF)

Enhanced Application Session Filtering allows to filter a specific application field from the incoming traffic. Enhanced Application Session Filtering supports the following session capabilities:

Netflow Cacheless export using TCP

NetFlow monitor enables you to set the cache timeout to zero and makes the NetFlow to operate in a cacheless mode. Each packet received by the NetFlow is treated as a complete flow and the metadata extracted from the packet are immediately exported without caching the flow. In cacheless mode, the metadata are direclty sent to the export buffer as they are not copied to the cache, thereby providing more record space.

GigaSMART Standalone User Plane Node Traffic Monitoring

In Standalone User Processing Node (UPN) traffic monitoring, the UPN processes the subscriber information that is extracted from the Packet Forwarding Control Protocol (PFCP) packets and correlates with the GTP-u traffic without the CPN.

Fabric Management: Stand-Alone User Plane Node Traffic Monitoring

GigaSMART 5G Network Slice Correlation

Network Slicing is a feature of 5G networks whereby slices of network resources are dedicated to a specific application. Gigamon enables customers to have differentiated levels of visibility for each network slice.

Fabric Management: 5G Network Slice Correlation

GigaSMART RAN Correlation

This feature enables the support for RAN based correlation for both 4G CUPS and 5G CUPS solutions. The monitoring of core traffic is based upon the RAN source. It exposes RAN data fields from control plane. RAN data fields are available for filtering and whitelisting.

Fabric Management: 5G RAN Correlation

Enhancements to 5G CUPS Configuration using Ansible

The Gigamon Ansible Module exposes playbooks that allows the configuration and maintenance of the CUPS solution, and the GigaVUE-FM GUI allows you to visualize, monitor and troubleshoot the CUPS solution.

Fabric Management: Configuration of CUPS using Ansible.

FM Core

Information Architecture and GUI Reorganization

Improved and modernized user experience. Ease of accessibility of the physical and virtual nodes and the solutions.

Fabric Management:

Alarms for Inline Networks and GigaSMART Operations

Alarms to track the changes in the health status of the inline network configurations and the GigaSMART Operations.

Administration

GigaVUE-FM Scale Enhancements

Provides a reliable and stable environment for managing large number of physical devices without any impact to the performance. Includes the following changes:

Fabric Management:

Administration:

Security

Protocol Signature Enhancements

Upgrade the protocol signature by upgrading the image file on the card, and by uploading the GigaSMART card image to GigaVUE-FM from the Internal Server or External Server.

Fabric Management:

Create an Application Intelligence Session

Software Licensing

Volume based licensing for V Series on VMware

Volume-Based License (VBL) is introduced to support V Series for VMware virtual device environments. In this model, instead of being assigned to a specific physical chassis or GigaSMART card, your license is based on the volume of data usage across many virtual devices gathered per available statistics collected in GigaVUE FM. The data measured is the raw ingress traffic on V Series nodes, GCB/GvTAP devices and licensed apps such as masking, slicing, and de-duplication on V Series nodes. With VBL you can also monitor and analyze your data usage daily, within specific service periods, or spanning multiple service periods.

Note:  If you are using Volume Based Licensing, please make sure that smtp.gmail.com access on port 25 of the GigaVUE-FM host machine is not blocked by firewall ACL (Access Control List) rules or a proxy server. If it is blocked, it will prevent GigaVUE-FM from sending the mandatory emails regarding volume usage to Gigamon at the end of each collection period (normally 3 months).

GigaVUE Cloud Suite:

All the V Series 2 nodes connected to GigaVUE-FM reports the stats. All licensed applications, when running on the node, generate usage statistics. In the Volume-Based Licensing scheme, a license entitles specific applications on your devices to use a specified amount of total data volume over the term of the license. The distribution of the license to individual nodes or devices becomes irrelevant for Gigamon’s accounting purpose. GigaVUE-FM tracks the total amount of data processed by the various licensed applications and provides visibility into the actual amount of data, each licensed application is using on each node, and track the overuse if any. You will have grace period for each license that are conveyed in the license file.

GigaSMART Security

RFS Configuration to Manage Encrypted Keys

Use Remote File System (RFS), a component in HSM to store and manage encrypted keys

Fabric Management:

Entrust nShield HSM for SSL Decryption for Out-of-Band Tools

CLI Reference :

apps hsm-group

Split DNS Profile Configuration for GigaSMART Engine Port

Configure separate DNS servers for internal and external networks to ensure better security and privacy management

CLI Reference:

Cloud

Network visibility with V Series nodes on VMware ESXi and NSX‑T

This feature is replacing the existing GVMs with V Series 2 fabric node for better efficiency and accessibility on VMware environments. With the V Series based solution, users can create Monitoring Session instead of configuring vMaps and use Automatic Target Selection instead of manual vNIC selection in VMware ESXi and NSX-T.

Software

GigaVUE-OS on DELL S4112F-ON

Introducing the GigaVUE‑TA25 Chassis

GigaVUE-OS on DELL S4112F-ON Installation Guide

Hardware

GigaVUE-TA25

Introducing the GigaVUE‑TA25 Chassis

GigaVUE-TA Series Hardware Installation Guide