Application Intelligence Capabilities

Application Intelligence provides the following capabilities for both physical devices and virtual nodes:

■

Application Visualization (earlier known as Application Monitoring) - Identifies and monitors all applications contributing to the network traffic, and reports on all applications, and their application families and tags and the total bandwidth they consume over a select period. Able to identify over 4000 applications. It displays the traffic statistics in bytes, packet and flows.

■

Application Filtering Intelligence- Enables traffic filtering by layer 7 applications, which means you can filter out high-volume, low-risk traffic from reaching the tools and direct high-risk network traffic of interest to the right tool at the right time. You can select applications based on the application name, family or tags.

■

Application Metadata Intelligence - Supports exporting up to 6000 attributes of metadata that provide relevant usage context for over 4000 applications, thus enabling you to rapidly identify indicators of compromise (IoC) for security analytics and forensics tools.

■

Application Metadata Explorer-Enables exporting application metadata to cloud- native tools. It converts CEF records from Application Metadata Intelligence (AMI) into JSON or Parquet format. JSON records can be exported over HTTP, HTTPS or Kafka. It can also enrich metadata from user-plane traffic with control-plane metadata for mobile networks or enrich application metadata with key host environment details for cloud workloads. Refer to Application Metadata Exporter to know more.

Note:  Application Intelligence requires a separate GigaSMART engine or engines in group.