What's New

Support for Traffic Acquisition using Inline V Series

Note:  Inline V Series is now available as an Early Access feature, giving you the opportunity to explore its capabilities before the general availability (GA).

Introducing support for a new inline tapping method, enabling GigaVUE V Series Nodes to operate in inline mode, launched and scaled by the platform using Third Party Orchestration. You can deploy the GigaVUE V Series Nodes in single or two-tier setups, with first-tier nodes tapping and load-balancing traffic to second-tier nodes for processing, filtering, and forwarding to tools. Additionally, you can group multiple GigaVUE V Series Nodes into "Node Groups" and configure multiple Monitoring Sessions within a single UI canvas, enhancing efficiency, reliability, and ease of traffic monitoring.

Supported Platforms: AWS, Azure.

Refer to:

• Inline V Series (AWS)

• Inline V Series (Azure)

Support for Traffic Acquisition using Azure vTAP

Note:  Gigamon is an early adopter of Microsoft’s vTAP capability. While Microsoft has not officially announced vTAPs as generally available (GA), Gigamon has conducted validation against the public preview version of the service. Microsoft has indicated that no further API changes are anticipated; however, as this is subject to Microsoft’s discretion, future modifications cannot be entirely ruled out.

GigaVUE‑FM now supports Azure vTAP, a native traffic mirroring solution provided by Microsoft Azure. With vTAP, you can tap traffic directly from virtual machine network interfaces and forward it to target network interfaces. The mirrored traffic is a deep copy of both inbound and outbound network traffic and can be sent to a destination IP endpoint or an internal load balancer within the same VNet or a peered VNet.

Refer to Traffic Acquisition using Azure Virtual Network TAP.

5G-Cloud Nokia HEP3 Support

The 5G-Cloud application in the GigaVUE V Series is enhanced to support processing of Nokia HEP3 format from the non-SBI network functions – IMS network functions and 3G, 4G network functions.

Non-SBI traffic is received as a TCP stream with HEP3 encoding by the 5G Cloud application. The 5G-Cloud will handle non-SBI control traffic and leverage the robust capabilities of NokiaHEP3 (Homer Encapsulation Protocol Version 3) to encapsulate and transport data securely, over TCP. Non-SBI control traffic is decoded from HEP3, emphasizing data handling without IP translation.

Refer to 5G Cloud Nokia HEP3 Support.

NetFlow Integrator-Transform NetFlow (IPFIX) records to JSON

This feature adds support for ingesting NetFlow/IPFIX packets from a variety of sources and devices (such as Firewalls, Routers, and Switches) in the AMX application. AMX ingests the NetFlow/IPFIX records, converts them into JSON format, and exports them to the tools over HTTPS or Kafka. Here are the key aspects of this feature.

• Be the single source of data for the NPM tools: Network traffic as AMI metadata and NetFlow insights from the network.

• Better integration with cloud-native tools, making it easier to manage hybrid multi-cloud environments.

• Gain a comprehensive understanding of your network traffic (packets and NetFlow) together in one format in one tool, leading to more effective troubleshooting and optimized network performance.

Refer to Application Metadata Exporter.

GigaVUE Cloud Suite for AWS now supports Instance Metadata Service Version 2 (IMDSv2) when deploying GigaVUE-FM in AWS.

Refer to:

UCT-C Statistics and Dashboard Support

The UCT-C policy and pod level dashboards are now available as visualizations with Fabric Health Analytics. The dashboards provide comprehensive insights into the Policy and pod level statistics. You can monitor both trend and total stats for pods associated with a selected policy and policies linked to a selected pod, within a specified time range. From this release, rule level statistics are not supported.

Refer to:

Support for L2GRE and VXLAN output for Casa vTAP

Introduced support for L2GRE and VXLAN egress tunnel types for CASA vTAP vendor integration method in 5G-Cloud.

Refer to 5G-Cloud Casa vTAP Support.

Standalone UCT-V for Linux – Remove Python Dependency

The UCT-V standalone module package will now be installed independently, eliminating external dependencies or dependent packages. All Python dependencies have been removed.

Refer to Linux UCT-V Installation.

Encrypted communication between GigaVUE-FM nodes in Fabric Manager High Availability (FMHA)
This feature implements secure data transmission between Fabric Manager High Availability (FMHA) nodes using encryption. This feature aids in securing communications between FMHA nodes with IPSec, using either Pre-Shared Secret Keys (PSK) or Certificate-Based Authentication.

This feature aims to improve the security, reliability, and compliance of GigaVUE-FM.

Refer to Encryption of Communication between FMHA Nodes.

Customer Deployed Assets

Customers who take advantage of Connected GigaVUE‑FM can manage their licenses today with the Automatic Entitlement Retrieval (AER) feature. AER has been extended to also allow GigaVUE‑FM to share with Gigamon the details of in-use hardware assets and software licenses.

Refer to Integrated License Management in GigaVUE-FM.

STIG Compliance

The newly installed GigaVUE-FM contains several enhancements that significantly improve the STIG compliance of the new GigaVUE-FM instance.

Refer to STIG Compliance in GigaVUE-FM.

Split DNS Server Configuration in GigaVUE-FM

The Split DNS Server configuration page enables you to create Split DNS server profiles, which enable the use of different DNS servers for internal and external networks, enhancing security and privacy. The Split DNS profile is then attached to the device by configuring it in the Inline SSL application. Split DNS Profile can be configured for GigaVUE HC Series Gen 3 and Gen 2 devices.

Refer to Split DNS Configuration.

Support for GEM for Mobile Networks for KVM hypervisor

GigaVUE Enriched Metadata export for Mobile Networks uses AMX application for correlation and export. AMX applications can now be deployed on the GigaVUE‑FM Hardware Appliance server on the KVM hypervisor.

Refer to:

• Application Metadata Exporter

• Install GigaVUE‑FM on KVM for GigaVUE-FM Hardware Appliance

• Configure GigaVUE V Series Nodes using KVM for AMX Deployment

Trailer Addition and Removal Support for Gen 3 GigaSMART Module

We have enhanced the Trailer Addition and Removal (Source Port Labeling) GigaSMART Operations (GSOP) to support Gen 3 modules in GigaVUE-HC1, GigaVUE-HC1 Plus, GigaVUE-HCT, and GigaVUE-HC3 devices. This functionality improves troubleshooting by enabling users to trace the origin of traffic within the Gigamon Deep Observability Pipeline.

Refer to:

• How to Use GigaSMART Trailers

• gsop

FIPS 140-3 Certification Support

This feature integrates SafeLogic's FIPS 140-3 provider with the OpenSSL library to ensure compliance with FIPS 140-3 certification. Additionally, support for Inline SSL is included, enhancing security and meeting industry standards for cryptographic modules.

Refer to:

• FIPS Compliance in Gen 3 GigaSMART modules

• About Inline TLS/SSL Decryption

Rotational Sampling Support in Gen 3 Module.

The rotational sampling feature is now supported in Gen 3 devices, which expands the capability by including support for UPN alongside Non-CUPS LTE. This support extends to both Overlap and Non-Overlap modes for UPN and Non-CUPS LTE.

Refer to GigaSMART Rotational Sampling.

Passive TLS/SSL Decryption Statistics

You can now view the Certificate, Service, and Error Statistics for Passive SSL Decryption configured nodes.

Refer to GigaSMART Passive TLS/SSL Decryption.

Standard option for SSH MaxAuthTries in Nodes

You can now configure up to three authentication attempts per SSH connection using the SSH server configuration command.

Refer to SSH.

Introducing a new chassis licensing of GigaVUE‑TA25E Device

GigaVUE‑TA25EB Chassis—This is only available with the first twelve (12) 25Gb/10Gb/1Gb ports and two (2) 100Gb/40Gb ports active and with port upgrade options.

To activate/upgrade the ports, GVOS/upgrade license is required.

Refer to GigaVUE‑TA25EB Chassis.