What's New

Hardware

New GigaVUE‑TA25E Device

The GigaVUE‑TA25E is the latest member of the GigaVUE TA Series. It has a fixed module that supports ports of provides 48 25Gb/10Gb/1Gb ports ( x1...x48) and 8 100Gb/40Gb ports (c1..c8).

New GigaVUE‑TA200E Device

The GigaVUE‑TA200E is the latest member of the GigaVUE TA Series. It has a fixed module that supports 64 100Gb/40 Gb ports.

Cloud

Increase or Decrease Nodes in a Cluster for VMware NSX-T

You can increase or decrease the number of V Series nodes in an existing monitoring domain when using Cluster-based deployments.

Volume-Based Licensing Modifications

The following details are newly added to the Volume-based licensing scheme:

• Bundle replacement policy

• Add-on packages which can be added to the base bundles.

Support for Sharing the Same Host across Different Monitoring Domains in VMware

You can deploy multiple GigaVUE V Series Nodes from VMware NSX-T monitoring domain and one V Series node from VMware ESXi monitoring domain on the same host.

Universal Container Tap

Universal Container Tap (UCT) is the new GigaVUE container tap that provides network traffic acquisition for containerized environments.

Amazon EKS, Azure AKS, VMware Tanzu, Red Hat OpenShift, and native Kubernetes are the platforms supported for UCT.

GigaVUE-VM to GigaVUE V Series Migration in VMware ESXi and NSX-V

You can now migrate your GigaVUE-VM visibility solution to GigaVUE V Series visibility solution on VMware ESXi and NSX-V.

Following are the two primary scenarios for GigaVUE V Series migration in GigaVUE-FM and in a GigaVUE-FM HA arrangement:

• Migrate from GigaVUE-VM to GigaVUE V Series on ESXi platform without any platform change.
• Migrate from GigaVUE-VM on NSX-V to GigaVUE V Series on NSX-T.
  • Migrate through NSX platform upgrade
  • Migrate through GigaVUE-VM on ESXi

GCB Packet Reordering

You can now use the packet reordering feature in your GCB solution to improve tool effectiveness. GCB waits for the pending packets from the requests and reorders the received packets to complete the transactions.

Export Application Metadata Intelligence output in JSON format

You can now use the Observability Gateway (OGW) application to export AMI output in JSON format. The OGW application converts the output from Application Metadata Intelligence (AMI) which is in CEF format into JSON format and sends it to cloud tools.

Embedded

E-Tag Based Clustering Enhancements

The below enhancements have been introduced in E-Tag based clustering such as:

GigaVUE FM Core

Export Data to External Data Server

GigaVUE-FM allows you to export statistical data from GigaVUE-FM to an external data server for analysis and visualization. The following data is exported from GigaVUE-FM (including the tags associated with the ports and maps) to an external data server:

• Port Statistics
• Map Statistics
• Map Rule Statistics

GigaStream Imbalance Notification

With the GigaStream imbalance notification functionality, the port statistics of the member ports in a GigaStream are validated to determine if traffic distribution across the ports is within the allowed threshold limit based on a threshold value configured. If traffic distribution is not within the allowed variance limit, the GigaVUE HC series and TA series devices generate SNMP traps that are sent to GigaVUE-FM based on which GigaStream imbalance alarms are triggered.

SNMP traps are generated in the devices based on the following conditions:

• Variance threshold % configured either through GigaVUE-FM or CLI
• Distribution of traffic between the ports (on a 30 second interval)

Fabric Health Analytics - Map Traffic Statistics

The Fabric Health Analytics feature in GigaVUE‑FM is enhanced with the new Map Traffic Statistics dashboard that displays statistics about traffic that has passed/dropped through the fabric to the destination(s).

Topology Visualization

The Topology page in GigaVUE-FM UI is enhanced as follows:

• Enhanced filter options. You can now:

  • Filter the devices based on the role
  • Save the filter
  • Show/hide unmatched devices

• Topology configurations are user-specific, that is, you can configure the topology as per your preference without affecting the views of other users.

• New UI Pages for Network Devices and Connections with the option to export and import the devices and connections.
• Smart layout now includes leaf-spine architecture.

IP Resolver (Supporting Multiple Dynamic NIC)

The IP Resolver page now allows you configure DNS server for more than one interface. This page has the following tabs:

• DNS Server
• Default Search Domains

GigaSMART

Supported Applications on Gen3 HC3

In SMT-HC3- C08 cards, the following GigaSMART applications are supported:

Supported Applications on Gen3 HC1

In SMT-HC1- S cards, the following GigaSMART applications are supported:

Vport Chaining within the same GigaSMART Group

The transit-level maps support Application Filtering Intelligence (AFI) and Application Metadata Intelligence (AMI) GigaSMART operations in SMT-HC0-Q02X08 of HC2P, SMT-HC3-C05 of HC3v2, HC1-X12G4 of HC1 with native, SMT-HC3-C08, and SMT-HC1-S cards.

GigaSMART GTP Rotational Sampling

GTP Rotational Sampling samples GTP sessions by IMSI number, using a rotating or sliding IMSI range, that rotates automatically on a configurable interval, without disrupting the treatment of existing sessions. It rotates through the entire pool of subscribers over time, such that all subscribers can be sampled in over time

Hardware

New GigaVUE-HC1-PLUS

The GigaVUE-HC1- PLUS is the latest member of the GigaVUE HC Series. It has a fixed module that supports ports of 4 x 100G/40 G, 8x25G, 10G, and 1G connectivity in a 1RU form factor.

It supports Flex-inline in unprotected ports with 100G/40G/10G/25G/10G/ speed. PRT-HC1-Q04, SMT-HC1-S, BPS-HC1-D25A60 and BPS-HC1-D35C60 modules are supported in GigaVUE-HC1-PLUS chassis.

Note:   Only Legacy PRT-HC1-Q04X08 and SMT-HC1-S modules are supported on GigaVUE-HC1-PLUS.

The following features will not be supported with this release on GigaVUE-HC1-PLUS:

Refer to GigaVUE-OS Compatibility and Interoperability Matrix to view supported optics.

New QSB 522 Transciever

100G/40G Dual Rate BiDi Transceiver Optic SKU QSB-522 is now supported.

Documentation

New Guides

The following three new guides are released:

Serviceability Enhancements

Cloud

Proper handling of multiple AWS accounts in single deployment

You can now monitor multiple AWS accounts or VPCs in a GigaVUE Cloud Suite for AWS monitoring domain.

Proper handling of multiple Azure subscriptions in single deployment

You can now monitor multiple Azure subscriptions or tenants in a GigaVUE Cloud Suite for Azure monitoring domain.

OpenStack OVS Mirroring support for VLAN Trunk Port

You can now use both access port and VLAN trunk port for the Open vSwitch (OVS) Mirroring on GigaVUE Cloud Suite for OpenStack.

GCB Transaction Logging

You can now choose to create GCB transaction log files to determine the failed transactions. For each HTTPS POST message from Pcapper to GCB, the GCB creates a transaction record. The transaction record is logged to a transaction log file in the GCB pod or to the Kubernetes logging stdout stream.

Cloud Health Monitoring

GigaVUE-FM allows you to monitor the configuration health status of the entire monitoring session and also the individual fabric components for which monitoring session is configured. This feature provides detailed information about the configuration and deployment status of the deployed monitoring session.

GigaVUE-FM HA on VMware NSX-T

GigaVUE-FM HA can be deployed in VMware ESXi and managed in VMware NSX-T Manager to provide uninterrupted services to the customers. You must configure external IP address while forming the HA cluster.

GigaVUE‑FM as image server for VMware NSX-T

You can now upload your V Series Node image files into GigaVUE‑FM. Instead of using an external server to upload your image files you can now directly upload your OVA files into GigaVUE‑FM.

Embedded

Flexible Inline Arrangement is now supported in GigaVUE-TA25

Flexible Inline arrangement functionality is now supported in GigaVUE-TA25. Due to the absence of BPS module and GigaSMART card Physical Bypass and Inline SSL functionality will not be supported. The Inline Bypass Solution (Classic) is not supported in GigaVUE-TA25.

E-Tag Based Clustering

Clustering can now be configured based on E-Tags on GigaVUE-HC Series and GigaVUE-TA Series. You can select E-Tag based stacking mode to enable this feature.

GigaVUE-FM Core

Configure PCAP from GigaVUE-FM

You can now configure Packet Capture (PCAP) from GigaVUE-FM. The port type used for packet capture can be tool, network, hybrid, inline or inline network. Packet capture functionality is now extended for the following:

Packet Capture configuration is available from the Ports page. Refer to the GigaVUE-FM User's Guide for details.

Delta Reports

GigaVUE-FM provides support for generating delta reports for Flow Filtering reports. Delta reports display statistical data for a specific time interval from the current time. Use delta reports to troubleshoot the flow filtering behavior across two different timestamps.

Enhancements to Alarms Page

- Alarm Drill down

Few of the alarms listed in the alarms page are now configured with hyperlinks to the source that triggered the alarm thus providing a quick view of the alarm resource and the reason for failure. The source-ID field of the following alarm types are configured as hyperlinks which when clicked opens the quick view of the resource or navigates to the respective resource pages:

The following new alarms are generated in GigaVUE‑FM when the device is unreachable or when the report is not generated:

The child alarm Health Indeterminable is triggered along with the parent alarms and will be listed as a correlated alarm.

Fabric Health Analytics

The Fabric Health Analytics feature in GigaVUE‑FM is enhanced with new dashboards and reports.

Fabric Asset Inventory: Displays inventory details of the devices managed by GigaVUE-FM and consists of the following data tables:

Fabric Health Dashboard now consists of two separate dashboards that display both metric and gauge visualizations.

The new Fabric Asset Inventory Report is added to the existing Reports list. Click on each of the items in the Report to navigate to the Discover page and to download the data tables in CSV format.

FIPS 140-2 Compliance in GigaVUE-FM

GigaVUE-FM is now compliant with the Federal Information Processing Standard (FIPS), a US government standard for security requirements of cryptographic modules. You can enable FIPS from the Preferences page in GigaVUE-FM. Once enabled, you cannot disable it. You can also create a FIPS enabled HA group.

Refer to the GigaVUE Administration Guide for details

Application Metadata Intelligence

Allow for disable of AMI CEF multi-collect​

This feature enables the multi-collect of attributes within a given Metadata Store cache which means that if a configured attributes is seen in multiple packets within the same flow, each of these information is collected. By default, when a new cache is created, multi-collect is enabled. When upgraded from an older release, the multi-collect option is enabled.

Advance-hash in Application Metadata Intelligence

This feature configures metadata cache advance-hash for encapsulated flows . This feature improves the efficiency of scheduling the distribution of encapsulated flows. It also improves the distribution of flows in service provider deployment cases. By default, when a new cache is created, advance hash is enabled. When upgraded from an older release, the advance hash is enabled.

AMI TEID Export on HC3 Gen3

In SMT-HC3-C08 cards, GigaSMART Application Metadata Intelligence supports the following packet attributes:

GigaSMART

Supported Applications on Gen3 HC3

In SMT-HC3- C08 cards, the following GigaSMART applications are supported:

Vport Chaining within the same GigaSMART Group

The transit-level maps supports multiple GigaSMART operations in SMT-HC0-Q02X08 of HC2P, SMT-HC3-C05 of HC3v2, HC1-X12G4 of HC1 with native, SMT-HC3-C08, and SMT-HC1-S cards.

GTP JSON

GTP Correlation engine can export records for each subscriber session. It only requires the GTP-C data to be input into the engine, and exports data in a streaming JSON format. This includes data such as subscriber ID, device ID, cell ID, session setup timestamp, and more. This data is used by metadata-ingestion tools.

Documentation

GigaVUE-FM Hardware Appliance Guide for GFM-HW1-FM010 and GFM-HW1-FM001-HW

This guide includes implementation information needed to get started with the GigaVUE-FM Hardware Appliance optimized module (GFM-HW1-FM001-HW) as a new, upgrading, or migrating customer.

GigaVUE TA Series Hardware Installation Guide

The GigaVUE TA Series Hardware Installation Guide is broken down and divided into the following guides:

Cloud

Support for V Series Node deployment using VMware NSX-T Manager

You can now deploy V Series Nodes through VMware NSX-T Manager. The deployed V Series Node can be monitored from GigaVUE-FM for traffic acquisition, processing and forwarding.

Supported GigaSMART operations on Microsoft Azure

GigaVUE Cloud Suite for Azure support the following GigaSMART Application Intelligence operations.

Embedded

Supported GigaSMART features on the 400G Link Traffic Aggregator

The GigaVUE-TA400 product consists of a 1RU, rack-mountable, 32 x 400G QSFP-DD/QSFP28/QSFP+ ports, dual hot-pluggable AC/DC power supplies, seven hot swappable fan modules, a serial console port, and a 10M/100M/1G management port. The following features are supported in 5.15 release such as :

GigaVUE-FM Core

Flow Ops Report Page Display Enhancement

The GigaSMART Report page now displays the report type, GigaSMART Group and the Pattern selected for generating the FlowOps report in the header pane with the time stamp of when the report was generated.

Flow Filtering Reports Usability Enhancement

GigaSMART Flow Filtering reports can now be generated as a single page. The links provided at the top of the report allows you to instantly navigate to the various sections in the report, thus eliminating excessive scrolling. The export button allows you to export the report in excel format with data captured in separate sheets for the different sections of the report.

API: /elasticUtils API

The  /elasticUtils API URL is now public and is available in the GigaVUE-FM swagger.

Documentation

This guide includes implementation information needed to get started with the GigaVUE-FM Hardware Appliance as a new, upgrading, or migrating customer.

Command Line Summary

This document summarizes the commands available in the command-line interface for the GigaVUE HC Series nodes. Commands are listed in alphabetical order with a summary of their syntax.

Cloud

Customer Orchestration of Traffic Acquisition for Azure

You can now configure GigaVUE Cloud Suite components like G-vTAP Controllers, G-vTAP Agents, and V Series Nodes through an external orchestrator like Azure Portal. The deployed fabric components can be monitored from GigaVUE-FM for traffic acquisition, processing and forwarding.

GCB Log Level Settings

With the GCB Log Level Setting, you can change the log level, modify the GCB log file size, and add miscellaneous log configuration messages for better logging and troubleshooting.

Geneve decapsulation for AWS

You can now choose the Geneve application from the GigaVUE Cloud Suite for AWS Monitoring Session canvas to acquire and strip Geneve headers. To route the traffic through the third-party network appliances seamlessly, the AWS gateway load balancer adds Geneve header to packets as they enter the VPC and strip these headers as the traffic leaves the VPC back into the servers. The third-party network appliances are expected to process traffic with these Geneve headers. When the GigaVUE-FM acquires the customer traffic, the packets are encapsulated in tunnels that are terminated in V Series nodes.

Cloud AMI/AFI Enhancements

You can now deploy multiple GigaVUE V Series nodes in a solution and use V Series Node API Proxy Server (VPS) to scale and manage multiple V Series nodes.

Red Hat certification of GCB on OpenShift

The GCB images are now "Red Hat Certified" for Red Hat OpenShift platform.
The Red Hat supported base images of the GCB applications are built on the top of Red Hat Universal Base Image or Red Hat Enterprise Linux Image.

Supports AWS Outposts

GigaVUE-FM now supports AWS Outposts. AWS Outposts is an on-premises extension of the AWS infrastructure, which allows you to make direct calls direct to AWS services (e.g., S3, EC2) from this solution.

Embedded

Flexible Inline Arrangement is now supported in GigaVUE-TA200

Flexible Inline arrangement functionality is now supported in GigaVUE-TA200. Due to the absence of BPS module and GigaSMART card Physical Bypass and Inline SSL functionality will not be supported. The Inline Bypass Solution(Classic)incompatibility remains same in GigaVUE-TA200.

Support Flexible Inline for Clustered GigaVUE HC Series Nodes

The GigaVUE HC Series nodes that can be now clustered with Flexible Inline solution for the following Flexible Inline features:

Resilient Inline Arrangement

Network Link Aggregation Group (LAG)

Asymmetrical Hashing

Single Tag vs Double Tag VLAN mode for GigaVUE-TA25

GigaVUE-TA25 can now configure the VLAN tag mode to be single tag or double tag at the chassis level. Single tagged mode will be the preferred mode of operation when the deployment environment needs the visibility of just untagged and single-tagged packets.

GigaVUE-FM Core

Topology Visualization enhancements:

• Port Discovery page: Allows bulk configuration of discovery protocols such as GDP, CDP and LLDP.
• Recently Viewed: Provides a list of recently viewed topologies. Click on a link to navigate to the topology.
• Manual Network Nodes and GTAP nodes: New options added in smart layout topology.
• View Option: Option to show and hide the external network nodes and tools.
• Edit Option: Ability to edit the topologies.

Fabric Health Analytics enhancements:

New system dashboards and corresponding visualizations have been added:

• Port Flapping
• GigaSMART Core Crash
• Fabric Map statistics (Physical)
• Port Capacity Planning

Ability to navigate from FHA Alarms and Events dashboards to GigaVUE-FM Alarms and Events pages (with filters applied).​

Fabric Health Analytics for Cloud enhancements:

New system dashboards and corresponding visualizations have been added:

• App(Virtual)
• Tunnel (Virtual)
• End Point Virtual

Enhancement to existing dashboards with the addition of Aggregate Summary panel

• Daily App Usage
• Daily Bundle Usage
• App Usage Summary
• Bundle Usage Summary

Dynamic Increase in GigaVUE-FM HA Instances

Until software version 5.13.00, GigaVUE-FM High Availability group was restricted to one active GigaVUE-FM instance and two standby GigaVUE-FM instances providing a scaled and resilient environment. As GigaVUE-FM is scaled up to manage many number of devices, higher computing and memory resources are required for the following reasons:

• Longer data retention period (up to 13 months).
• Better search performance with more horizontal distribution of Elastic Search for features such as Fabric Health Analytics (FHA), Topology Visualization.
• Better indexing performance with the number of instances collecting various statistics on the configured components.

Therefore, the number of Elastic Search instances has to be increased in the HA group for scalable performance of the various features in GigaVUE-FM. GigaVUE-FM now allows you to add more than three GigaVUE-FM instances to the HA group. You can add any number of instances to the HA group as required.

Port Packet Drop and Error Thresholds
GigaVUE HC series and TA series devices generate SNMP traps for packet drops and packet errors that occurs in the port for both ingress and egress traffic. The traps are sent to GigaVUE-FM based on which alarms are often triggered even for a single packet drop or error. You can now configure threshold values for port packet drop/error based on which the number of traps can be controlled.

Alarm Suppression

GigaVUE- FM allows you to suppress alarms that are raised during maintenance operation of a specific resource, cluster or node. You can suppress an alarm or alarms for a specific period or indefinitely by:

• Suppressing from Alarms page

• Suppressing from Physical Nodes page

You can also configure auto-suppression of alarms for certain GigaVUE-FM triggered operations on device such as Configuration Restore, Device Reboot, Image Upgrade on a cluster or node., and Cluster Creation Operations.

Support SNMP Traps for GigaVUE-FM Alerts

GigaVUE-FM sends SNMP v2c/v3 Trap notification for the GigaVUE-FM events such as Image Upgrade Status, Backup operation Status, etc., to the configured SNMP trap receivers.

GigaSMART

Optimized Elephant Flow processing for AFI

Application Filtering Intelligence detects and handles the elephant flows in the traffic. The feature is supported on the following GigaSMART modules:

• HC1-X12G4
• SMT-HC3-C05
• SMT-HC0-Q02X08

Supported Applications on Gen3 HC3 GigaSMART

The following GigaSMART applications are supported on the new SMT-HC3- C08 module:

• Masking
• Packet Slicing
• De-Duplication
• Adaptive Packet Filtering (APF) –– Supported without RegEX
• Application Session Filtering (ASF)
• Application Filtering Intelligence (AFI)
• Application Metadata Intelligence (AMI)
• GTP Whitelisting –– Non-CUPS GTP Correlation only
• GTP Flow Sampling –– Non-CUPS GTP Correlation only
• Load Balancing (Stateless)
• Load Balancing (Stateful)
• Tunnel Encapsulation
• Tunnel Decapsulation

Hardware

New Gen3 HC3 GigaSMART Module

The SMT-HC3-C08 module is the 3rd generation GigaVUE-HC3 GigaSMART module. This module is compatible only with Control Card version 2 (CCv2) and has two GigaSMART engines which have increased performance over the SMT-HC3-C05 module

New 400G Link Traffic Aggregator

The GigaVUE-TA400 product consists of a 1RU, rack-mountable, 32 x 400G QSFP-DD/QSFP28/QSFP+ ports, dual hot-pluggable AC/DC power supplies, seven hot swappable fan modules, a serial console port, and a 10M/100M/1G management port. The following features are not supported in 5.14 release such as :

Documentation

Inclusive Language Initiative

Gigamon is adopting inclusive language standards and is in the process of updating all of our content to remove exclusionary language wherever it exists, whether that be in Gigamon products and documentation, public-facing marketing materials, or internal communications. As we make these changes, we will announce updates to our terminology in our release notes and product documentation.

For more information, refer to Inclusive Language Initiative.

Cloud

V Series 2 on Azure

This feature is replacing the existing V Series 1 node with V Series 2 node environments with optional V Series Proxy for better efficiency and accessibility on Azure platforms. With the V Series 2 based solution, you can create ingress tunnels, use public IP address types, and use all the V Series 2 supported GigaSMART applications in Monitoring Sessions.

OVS Mirroring for V Series 2 on OpenStack

Now you can only select OVS Mirroring as your Traffic Acquisition Method for both OVS Mirroring and OVS Mirroring + DPDK. GigaVUE-FM can now auto detect and select the OVS Mirroring type required.

Service Identification on GCB

In the Service mesh and HTTPS/2 supported platform, the Pcapper sends HTTPS/2 requests to GCB. On receiving the HTTPS/2 request from Pcapper, GCB applies the rules configured in GigaVUE-FM and forwards the filtered traffic to Tools or V Series 2 Nodes through L2GRE or VXLAN tunnels.

These IP addresses of the Pcapper HTTPS/2 packets are temporary and the services running in multiple Kubernetes clusters can have same IP address. To correlate these ephemeral and same IP addresses, the GigaVUE-FM maps these ephemeral IP addresses with the corresponding source and destination CSV mapping files received from the Service Mesh and HTTPS/2 Supported platform and converts them to the external IPv6 addresses.

Dashboards for Cloud Statistics and Volume Based Licensing

This enhancement introduces the following dashboards and the associated visualizations:

Cloud Enhancements

Supported GigaSMART operations on AWS, OpenStack and VMware

GigaVUE Cloud Suite for AWS and GigaVUE Cloud Suite for VMware support the following GigaSMART Application Intelligence operations in GigaVUE-FM version 5.13.00:

SHA1 support has been removed in 5.13.xx to improve security. Refer to Addendum in the Release Notes v5.13.xx for details.

GigaVUE-FM Core

Fabric Health Analytics BETA

With Fabric Health Analytics, you can view the operational and health status of the various physical and virtual resources through the dashboards and visualizations. With this functionality you can:

The following new dashboards have been introduced:

Topology Visualization Beta

The Topology Visualization Beta page allows you to create tagged layout topology. For smaller deployments, GigaVUE-FM creates Smart Layout Topology.This feature is enhanced as follows:

Bulk Tagging

GigaVUE‑FM allows you to instantaneously,

• Bulk upload a large number of tag keys and tag values
• Assign tags to the resources such as nodes, clusters, ports, and maps.

Use the Import and Export Tags as Resources options in the Tags page to upload a CSV file containing the required fields.

Email Notifications

The Email Notifications functionality is enhanced such that:

• you can now schedule notification of specific events either as instant or digest notifications, depending on the configurations in the Scheduler page.
• send notifications to the permitted list of recipients added to the Permitted Recipients page.
• With the Test Email button in the Email Server page, you can send a test email for confirmation.

GigaVUE-FM UI Reorg

The GigaVUE‑FM GUI is enhanced as follows:

Note:  Save Config option is removed from the top navigation bar and moved under the Chassis option

Rule-level Tagging

You can now associate tags to map rules. Each rule within a map can be associated with different tags Ids and tag values. This is applicable for both flow maps and fabric maps.

The Map Statistics dashboard includes visualizations that allows you to view the statistics of the flow of traffic at the rule level.

GigaVUE‑FM Scale Enhancements

Provides a reliable and stable environment for managing a large number of physical devices (up to 3000 devices) without any impact to the performance.

The following changes are included as part of this release:

Note:  Support for VIP in GigaVUE‑FM High Availability cluster is deprecated from software version 5.13.00. If there is VIP configured in GigaVUE‑FM < release 5.13.00, it will be continued after the upgrade. You will only be able to delete the existing VIP from software version 5.13. You cannot add or update the VIP.

The GigaVUE-FM GUI is enhanced as follows:

• Add New TACACS+ page: ASCII AuthType added as an option.
• Support for entering 64 characters when configuring the password in the GigaVUE-FM GUI.
• 'Control Traffic' checkbox added to pass the GTP Control Traffic to all the GigaSMART engines in a GTP engine group.
• Near-Real Time view in the GigaVUE-FM GUI for the following changes related to Inline Bypass and Inline SSL Decryption:
  • Inline Network Forwarding State updates
  • Inline Tool Operational State and Flex Status
  • Inline Tool Group Operational State and Flex Status

These event-related updates will automatically get reflected in the respective pages. You can also use the Refresh button to view the Near-Real Time updates.

GigaSMART Mobility

Passive SSL Decryption with HSM Support on SMT-HC1-S (Early Access)

The Generation 3 GigaSMART card (SMT-HC1-S), now supports Entrust nShield Hardware Security Module(HSM) integrated with Passive SSL decryption.

Note:  Early Access is a pre-GA feature status indicating it is not recommended for production networks. The functionality has been tested. Little to no system testing has been performed, however, and performance/scale data is not yet available. Preliminary documentation is available.

MAC Address Rewrite

A user can now control or modify the Destination MAC and source MAC address of incoming traffic packets and deliver it to the tools according to the flow mapping configurations.

Support Flexible Inline for Clustered GigaVUE HC Series Nodes

The GigaVUE HC Series nodes can now be clustered with Flexible Inline solution for the configuration path. The traffic path is limited to a single node such that all inline network and tool ports should reside in the same node. The Flexible Inline features that can be configured are as follows:

Flexibility to Configure the PTP VLAN Range

The PTP VLAN ID range has been increased to 2-4000. Hover on the help icon to identify the available VLAN ID resouce.

The GigaVUE Cloud Suite for VMware Guide is now split into two separate guides:

Threat Detection

SMT-HC1-S (GigaVUE-HC1 Gen 3 module with ThreatINSIGHT Sensor support)

GigaVUE-HC1 supports a Generation 3 GigaSMART card (SMT-HC1-S), which gives 80Gb throughput and can be used to provide the ThreatINSIGHT solution for security detection.

Hardware:

SMT-HC1-S (Gen 3 GigaSMART Card)

Gigamon ThreatINSIGHT Sensor

Gigamon ThreatINSIGHT is a SaaS-based network security monitoring platform built with the ability to detect, respond, and investigate network-based threats. You can also deploy Gigamon ThreatINSIGHT Sensor on the GigaVUE-HC1 SMT-HC1-S module using GigaVUE-FM. It provides single, integrated security solution for threat-detection.

Fabric Management:

Gigamon ThreatINSIGHT Sensor

Fabric Management:

Supported GigaSMART Operations

Fabric Maps

Fabric Port Group

Extends GigaSMART load balancing functionality to fabric maps using circuit ids and circuit tunnels, thus allowing load balancing between tool ports that reside on different clusters.

Fabric Management: Fabric Port Group

Flexible Inline Arrangement

Resilient Inline Arrangement with Single VLAN Tag

Deploy resilient inline arrangement with a single VLAN tag in which, a packet received from an inline network is guided to the inline tool using a single VLAN tag, which is configurable when creating a flexible inline map.

Fabric Management: Configure Resilient Inline Arrangement

GigaVUE-OS

Microburst Enhancements

The Microburst performance in GigaVUE-OS devices have been improved such that devices have some amount of buffer to queue these packets.

Fabric Management: Microburst

High and Low Utilization for GigaSMART Engine Ports

GigaSMART engine ports now use high and low utilization threshold percentage. The utilization alarms will be forwarded to SNMP management stations configured as notification destinations.

Fabric Management: Set Port Utilization Thresholds

CLI Reference: portsnmp-server

Port Filter Statistics Enhancements

View the port filter counters based on the filter rules configured for the port.

Fabric Management: Port Filters

CLI Reference: port

New Active Visibility Conditions and Actions for Inline Tool Groups

You can now configure Active Visibility policies using conditions and actions that are newly added for inline tool group and flexible inline maps.

Fabric Management: Configure Active Visibility

CLI Reference: policy

Intent-Based Orchestration

Intent Based Orchestration Enhancements:

Fabric Management: Orchestrated Configurations

Mobility

GigaSMART TCP Enhancements

In 5G traffic, the GigaSMART TCP load balancing is performed based on the following correlations:

Fabric Management:

GigaSMART 5QI Correlation

In 5G traffic, 5QI values present in the control traffic and its associated QoS Flow Identifiers (QFI) value are correlated and the data traffic is sent to the tools.

Fabric Management: GigaSMART 5QI

Enhanced Application Session Filtering (ASF)

Enhanced Application Session Filtering allows to filter a specific application field from the incoming traffic. Enhanced Application Session Filtering supports the following session capabilities:

Netflow Cacheless export using TCP

NetFlow monitor enables you to set the cache timeout to zero and makes the NetFlow to operate in a cacheless mode. Each packet received by the NetFlow is treated as a complete flow and the metadata extracted from the packet are immediately exported without caching the flow. In cacheless mode, the metadata are direclty sent to the export buffer as they are not copied to the cache, thereby providing more record space.

GigaSMART Standalone User Plane Node Traffic Monitoring

In Standalone User Processing Node (UPN) traffic monitoring, the UPN processes the subscriber information that is extracted from the Packet Forwarding Control Protocol (PFCP) packets and correlates with the GTP-u traffic without the CPN.

Fabric Management: Stand-Alone User Plane Node Traffic Monitoring

GigaSMART 5G Network Slice Correlation

Network Slicing is a feature of 5G networks whereby slices of network resources are dedicated to a specific application. Gigamon enables customers to have differentiated levels of visibility for each network slice.

Fabric Management: 5G Network Slice Correlation

GigaSMART RAN Correlation

This feature enables the support for RAN based correlation for both 4G CUPS and 5G CUPS solutions. The monitoring of core traffic is based upon the RAN source. It exposes RAN data fields from control plane. RAN data fields are available for filtering and whitelisting.

Fabric Management: 5G RAN Correlation

Enhancements to 5G CUPS Configuration using Ansible

The Gigamon Ansible Module exposes playbooks that allows the configuration and maintenance of the CUPS solution, and the GigaVUE-FM GUI allows you to visualize, monitor and troubleshoot the CUPS solution.

Fabric Management: Configuration of CUPS using Ansible.

FM Core

Information Architecture and GUI Reorganization

Improved and modernized user experience. Ease of accessibility of the physical and virtual nodes and the solutions.

Fabric Management:

Alarms for Inline Networks and GigaSMART Operations

Alarms to track the changes in the health status of the inline network configurations and the GigaSMART Operations.

Administration

GigaVUE-FM Scale Enhancements

Provides a reliable and stable environment for managing large number of physical devices without any impact to the performance. Includes the following changes:

Fabric Management:

Administration:

Security

Protocol Signature Enhancements

Upgrade the protocol signature by upgrading the image file on the card, and by uploading the GigaSMART card image to GigaVUE-FM from the Internal Server or External Server.

Fabric Management:

Application Intelligence Session

Software Licensing

Volume based licensing for V Series on VMware

Volume-Based License (VBL) is introduced to support V Series for VMware virtual device environments. In this model, instead of being assigned to a specific physical chassis or GigaSMART card, your license is based on the volume of data usage across many virtual devices gathered per available statistics collected in GigaVUE FM. The data measured is the raw ingress traffic on V Series nodes, GCB/GvTAP devices and licensed apps such as masking, slicing, and de-duplication on V Series nodes. With VBL you can also monitor and analyze your data usage daily, within specific service periods, or spanning multiple service periods.

Note:  If you are using Volume Based Licensing, please make sure that smtp.gmail.com access on port 25 of the GigaVUE-FM host machine is not blocked by firewall ACL (Access Control List) rules or a proxy server. If it is blocked, it will prevent GigaVUE-FM from sending the mandatory emails regarding volume usage to Gigamon at the end of each collection period (normally 3 months).

GigaVUE Cloud Suites:

Base Bundles

GigaSMART Security

RFS Configuration to Manage Encrypted Keys

Use Remote File System (RFS), a component in HSM to store and manage encrypted keys

Fabric Management:

Entrust nShield HSM for SSL Decryption for Out-of-Band Tools

CLI Reference :

apps hsm-group

Split DNS Profile Configuration for GigaSMART Engine Port

Configure separate DNS servers for internal and external networks to ensure better security and privacy management

CLI Reference:

Cloud

Network visibility with V Series nodes on VMware ESXi and NSX‑T

This feature is replacing the existing GVMs with V Series 2 fabric node for better efficiency and accessibility on VMware environments. With the V Series based solution, users can create Monitoring Session instead of configuring vMaps and use Automatic Target Selection instead of manual vNIC selection in VMware ESXi and NSX-T.

Software

GigaVUE-OS on DELL S4112F-ON

Introducing the GigaVUE‑TA25 Chassis

GigaVUE-OS on DELL S4112F-ON Installation Guide

Hardware

GigaVUE-TA25

Introducing the GigaVUE‑TA25 Chassis

GigaVUE-TA Series Hardware Installation Guide