What's New

Cloud

Next generation G-vTAP is a lightweight solution that acquires traffic from Virtual Machines and in-turn improves the performance of the G-vTAP Agent mirroring capability. The solution has a prefiltering capability at the tap level that reduces the traffic flow from the agent to V Series node and in-turn reduces the V Series load. Next generation G-vTAP Agent gets activated only on Linux system with a Kernel version above 5.4.
Prefiltering allows you to filter the traffic at G-vTAPs before sending it to the V Series nodes. For prefiltering the traffic, GigaVUE-FM allows you to create a prefiltering policy template and the template can be applied to a monitoring session.

Use of Virtual machines as targets for VMware ESXi

When creating maps for VMware ESXi in GigaVUE-FM, you can now select virtual machines as targets. You can view and filter the list of virtual machines available. You can also select the Network Adapters associated with each Virtual Machine.

Cloud Overview Page

The overview page is a central location to view and monitor all the monitoring sessions in a single place. You can use this overview page to spot issues which will help in troubleshooting, or perform basic actions like view, edit, clone, and delete. This page provides a quick overview of basic statistics, V Series Alarms, Connection Status and Volume Usage vs Allowance and a table to summarize the active monitoring sessions details.

Support for Tapping Traffic from VLAN-Backed NSX Segments

You can now monitor traffic from the virtual machines deployed in the VLAN-Backed NSX Segments in VMware NSX-T.

Universal Container Tap (UCT): Traffic Policy Statistics
Traffic Policy Statistics in the GigaVUE-FM provides the visibility of the policies within a Monitoring Domain and displays the trending information of the policies and its rules statistics in the dashboard. It also allows visualization and performance at every container level of the Policy Deployment.

Rules are configured in the UCT to either forward the traffic to a Tunnel or drop the flow of the traffic. In the Policies page, along with the UCT policy and its rules, you can also view the aggregated statistics of all the source selectors which are part of the policy.

The activities of the rules are reflected by the statistics counters. The statistics counters show how the policy statistics is directly cor-related to the policy and its rules configured through the GigaVUE-FM.

Support for Traffic Pre-filter in AWS

If you want to filter the traffic, then you can create a traffic mirror filter on AWS and add rules to determine the traffic that is mirrored. This traffic mirror filter acts as a pre-filter and pass only the filtered traffic to the GigaVUE V Series Nodes. You can apply filters at two levels:

1. Account level
2. VPC level

Support for Gateway Load Balancer and Network Load balancer in Application Intelligence Solution

Application Intelligence solution supports Gateway Load Balancer and Network Load balancer with VPC mirroring as the Traffic Acquisition Method.

Virtual Small Form Factor

You can now monitor traffic in the branch office or the remote location using the GigaVUE-FM in the headquarters. Using a host hardware which has the VMware ESXi host deployed in it , you can deploy the GigaVUE V Series Nodes in it from the branch office and monitor it using the GigaVUE-FM in the Central location.

Embedded

User Configurable Tag Protocol Identifier (TPID) for VLAN Tagging

With this feature you can now specify the Tag Protocol Identifier (TPID) for VLAN tagging while configuring the port depending on your requirements for the Inline/OOB tool. This includes the following TPID options

The purpose of this feature is to Support for Resilient Inline Arrangement and Inline SSL in GigaVUE‑HC1-Plus

GigaVUE FM Core

Disk Space Monitoring

With the disk space monitoring feature, notification banners are displayed in the GigaVUE-FM GUI when disk space usage level exceeds a specific threshold limit thus alerting users immediately about the critical disk usage levels.

Disk usage levels in all three partitions (/config, /var, /) of GigaVUE-FM is now monitored.

AMI Tool Templates

The following new AMI tool templates are introduced in Application Metadata Intelligence. These tool templates are applicable for both physical and virtual devices.:

Support for IPv6 Clustering

You can configure the cluster topologies and perform cluster- related operations using IPv6 stacking. With this enhancement You can now:

GigaSMART

NetFlow License Check and Configuration Enablement in Application Intelligence

On Gen3, NetFlow solution is provided by the Application Intelligence solution. This feature enables using the Application Intelligence solution for NetFlow configuration.

The NetFlow app is supported from the App Intel solution by abstracting the device level implementation. The GigaVUE-FM GUI will display NetFlow as a new GSOP application when the NetFlow license is installed on the node. Here you can configure NetFlow with the pre-defined V5 template or V9 attributes.

HC1 Gen3 iSSL with HSM and HC3 Gen3 iSSL with HSM

The purpose of this feature is to provide the capability for inline-SSL feature to work with HSM (Hardware Security Module) hardware. Some enterprises where security is paramount use nCipher HSM to keep the sensitive information such as private keys safe. For the deployments that involves HSM, changes need to be done for how the keys are used during session establishment for inline-ssl feature.

L3 Tools Support For HC1-Plus

The L3 tools support is now available for GigaVUE-HC1-Plus.

User-Defined Application Signature Support in Application Intelligence

This feature improves customer experience by giving the ability to classify the applications that are not classified automatically by the DPI engine. The http, https, tcp, and, udp applications can be identified and named by using this feature.

This feature is supported for both V series and H series.

Uboot Update Notification for Gen 3 GS Card in Standalone Mode

This feature blocks you from executing CLI commands when uboot update is in progress. You will get the following notification during bootup or card configuration.

% GS Card uboot upgrade is happening. Cannot execute CLI command now

You cannot execute any CLI command until the uboot update is complete or until a timer of 15 minutes expires

iSSL Active /Standby Failover Improvement

The following CLI commands is added to clear the session table entries:

condition add PortRxPktLow param portId <port connected to active firewall> param thresh <minimum packet count> action add InlineSslFlushAll

where InlineSslFlushAll action is used for clearing the session table entries.

Support for IPv6 iSSL Decryption

IPV6 iSSL decryption functionality is now supported for Generation 3 devices.

Hardware

PRT-HC1-X12 Module

A new line card PRT-HC1-X12 module provides a total 120Gb of connectivity with line rate on-board switching across twelve 10Gb/1Gb SFP/SFP+ ports. When two PRT-HC1-X12 modules are installed in the node, the GigaVUE-HC1-Plus provides twenty-four 10Gb/1Gb ports.

GigaVUE‑HC1 X-Port to Support 10/100M Speed

The X ports of the GigaVUE-HC1 Base Chassis and PRT-HC1-Q04X08 module offer 10M/100M speed when 1 G copper optics are utilized.

GigaVUE‑HC1-PlusOptics Qualification

GigaVUE‑HC1-Plus supports optics from this release, version 6.2.00.

GigaVUE‑TA25E supports optics from this release, version 6.2.00.

CBL-505/510/550 Dual rate 100/40G AOC optics is now supported.

GigaVUE-OS and GigaVUE-OS Module Licenses

GigaVUE-OS and GigaVUE-OS Module licenses can now be activated from the GigaVUE-FM GUI. Activation of licenses from GUI is applicable only for the GigaVUE HC Series devices and devices must be running software version 6.2.00

Appropriate banner notifications are displayed when the licenses expire.

Documentation

The following new guides are released:

• GigaVUE-OS Security Hardening Guide

• GigaVUE Security Firewall Guide

• GigaVUE Licensing Guide

• GigaVUE Cloud Suite for AWS Secret Regions Guide

Cloud

Traffic Health Monitoring

GigaVUE-FM allows you to monitor the traffic health status of the entire monitoring session and also the individual GigaVUE V Series Nodes for which monitoring session is configured. Traffic health monitoring focuses on identifying any discrepancies (packet drop or overflow etc) in the traffic flow. When any such discrepancies are identified, GigaVUE-FM propagates the health status to corresponding monitoring session.

Header Stripping Application

Header Stripping application efficiently examines the packets for specified headers like GTP, ISL, ERSPAN, MPLS, MPLS+VLAN, VLAN, VN-Tag, VXLAN, FM6000Ts, and generic and removes them before sending the packet to the appropriate security and analysis tools. Each packet is examined for the packet forwarding addition and it also ensured that the headers are removed from the packet before sending the packet to the tools.

5G-Service Based Interface (SBI) Application synthesizes the HTTP2 transactions with proper L2, L3, and L4 headers from the JSON encoded data that it receives from the UDP-GRE or VXLAN ingress TEPs (Tunnel End Point). Once the headers are synthesized and a complete HTTP2 transaction is formed, the packets are sent to the egress TEP and then sent to the physical or virtual probes. The feature is supported on the following platforms:

GigaVUE-FM supports mirror configuration using IPv6 which creates IPv6 tunnel to V Series node.

OVS Mirroring - SmartNIC offload

From this release, OVS Mirroring is supported in Hardware offload.

UCT: Bi-directional Rules

In UCT, the source selector taps the traffic in both directions.

UCT: Source Selector

In UCT, the source selector supports the following addtional filter rules:

UCT: Inventory Discovery

In UCT, while creating a monitoring domain, there are following options to upload the inventory information:

You can now configure gateway load balancer endpoint as a target and the mirrored traffic can be forwarded from any subnet, AWS Virtual Private Cloud (VPC), or account in a highly scalable and operationally efficient manner to a GigaVUE V Series Node. The gateway load balancer endpoints are deployed in your subnets which contain the workloads.

You can now configure GigaVUE Fabric Components like G-vTAP Controllers, G-vTAP Agents, and V Series Nodes using an external orchestrator. The deployed components will be available under Third Party Orchestration monitoring domain.

You can use your own orchestration system to deploy GigaVUE V Series Nodes and then use GigaVUE‑FM to configure advanced features like Application Intelligence, Application Metadata Intelligence, and Application Filtering Intelligence

You can now configure GigaVUE Fabric Components like G-vTAP Controllers, G-vTAP Agents, and V Series Nodes using Google Cloud Platform. The deployed fabric components can be monitored from GigaVUE-FM for traffic acquisition.

You can now configure GigaVUE Fabric Components like G-vTAP Controllers, G-vTAP Agents, and V Series Nodes using Nutanix Prism Central and also monitor the traffic in Nutanix VPC. The deployed fabric components can be monitored from GigaVUE-FM for traffic acquisition.

Support for V Series 2 on Nutanix

This feature is replacing the existing GigaVUE-VMwith V Series 2 node for better efficiency and accessibility on Nutanix environment. You can use Dedup and Load balancing applications in Monitoring Sessions

Fabric Components like G-vTAP Controllers, G-vTAP Agents, GigaVUE V Series Nodes, and GigaVUE V Series Proxy's version are now streamlined and they are in line with the GigaVUE-FM version.

GigaVUE-FM version - 6.1.00

G-vTAP Controller - 6.1.00

G-vTAP Agent - 6.1.00

GigaVUE V Series Node - 6.1.00

GigaVUE V Series Proxy - 6.1.00

GigaVUE FM Core

Manage Not-Reachable Nodes

GigaVUE-FM can now manage the nodes that are not reachable by the cluster leader. The member nodes occasionally will not be reachable by the cluster leader if they have been deleted intentionally using CLI or if they are not-reachable due to power outage, crash or other similar reasons.

GigaVUE-FM manages the not-reachable member nodes as part of the cluster and does not remove the nodes from the cluster, that is, GigaVUE-FM manages the not-reachable nodes in faulty/offline state. This allows easy management of the not-reachable nodes, especially in large deployment scenarios

You can view the clusters with not-reachable nodes in the Physical Nodes page and in the Chassis page.

Traffic Drop Identification

GigaVUE-FM periodically collects statistical data of the physical and logical resources from the devices. It is possible to detect significant traffic drop of a component using this historical data.

The Traffic Drop Identification feature is implemented to detect the traffic drop at the decapsulation side of the tunnel. With this feature, you can create Alert Policies that binds the conditions and the resources required to identify the traffic drop.

For software version 6.1.00, this feature is applicable for tunnel traffic drop identification.

End-to-End Tunnel Monitoring

The Tunnel Monitoring page provides a unified view of both ends of the tunnels created across the devices managed by GigaVUE-FM.

GigaVUE-FM uses a tunnel discovery mechanism to identify the tunnels created across the managed nodes and clusters. The identified tunnels are logically grouped based on a specific grouping criteria and listed in the Tunnel Monitoring page.

You can view the tunnel logical group statistics and also the health status of the components participating in the tunnel. You can also identify the traffic drop at the tunnels using the Traffic Drop Identification feature.

Improved Data Retention with Data Rollup

With Data Rollup feature, GigaVUE-FM allows you to collect, summarize and display historical data for a period of 120 days with hourly granularity. Data Rollup is applicable only for Ports for this release.

Rollup is enabled by default.

Note: On upgrading to software version 6.1.00, ensure to increase the disk space for data rollup.

Upload Images in GigaVUE-FM

When upgrading GigaVUE-FM from the UI, you can upload only up to three images. If you try to upload a fourth image file, GigaVUE-FM removes the image file that was uploaded first based on timestamp and allows the fourth image file to upload successfully.

GigaSMART

You can now use the Application Metadata Exporter (AMX) application to export AMI output in JSON format to Kafka. The AMX application converts the output from Application Metadata Intelligence (AMI) which is in CEF format into JSON format and sends it to Kafka.

SCTP Protocol support for Application Filtering Intelligence

GigaSMART Application Filtering Intelligence (AFI) feature matches network flows using rules configured on second-level map and forwards matching flow sessions to a chassis tool port and/or the next GigaSMART application in the chain. From 6.1 release, AFI supports sessions based on Layer4 protocol SCTP and all the protocols that run on top of SCTP. SCTP support for AFI is available on the following platforms:

Add source device and interface details to Netflow

You can collect details on the switch management interface details discovery through network discovery and export the same using NetFlow feature. You can collect IPv4 or IPv6 switch management interface address by including additional collects in their configuration. This feature is currently supported in Generation 2 Legacy netflow CDP or LLDP process.

GTP Rotational Sampling FM Stats

You will have the ability to select the flow sampling type as "default" or "rotational", configure the timer, and the offset values during the creation and edition of Mobility solution.

ISSL Qualification for HC1-Plus

The SSL decryption for inline and out-of-band tools is now supported on GigaVUE-HC1-Plus.

TLS decryption offload for Layer 3 tools

In SMT-HC3-C08 cards, the Advanced Flow Slicing (AFS) and Standalone UPN (4G / 5G) applications are now supported. In SMT-HC3-C08 cards, 4G CUPS is supported as BETA.

In SMT-HC1-S cards, the Advanced Flow Slicing (AFS) application is now supported.

In SMT-HC1-S card and GigaVUE-HC1-Plus chassis built-in GigaSMART engine, the Mobile VUE 4G GTP Correlation and Advanced Flow Slicing (AFS) applications are now supported.

Grace Period Behavior

Gigamon offers a uniform grace period of 45 days from the day the license expires. During the grace period:

This grace period behavior is applicable for the following license types:

Documentation

The following new guides are released:

Serviceability Enhancements

Hardware

New GigaVUE‑TA25E Device

The GigaVUE‑TA25E is the latest member of the GigaVUE TA Series. It has a fixed module that supports ports of provides 48 25Gb/10Gb/1Gb ports ( x1...x48) and 8 100Gb/40Gb ports (c1..c8).

New GigaVUE‑TA200E Device

The GigaVUE‑TA200E is the latest member of the GigaVUE TA Series. It has a fixed module that supports 64 100Gb/40 Gb ports.

Cloud

Increase or Decrease Nodes in a Cluster for VMware NSX-T

You can increase or decrease the number of V Series nodes in an existing monitoring domain when using Cluster-based deployments.

Volume-Based Licensing Modifications

The following details are newly added to the Volume-based licensing scheme:

• Bundle replacement policy

• Add-on packages which can be added to the base bundles.

Support for Sharing the Same Host across Different Monitoring Domains in VMware

You can deploy multiple GigaVUE V Series Nodes from VMware NSX-T monitoring domain and one V Series node from VMware ESXi monitoring domain on the same host.

Universal Container Tap

Universal Container Tap (UCT) is the new GigaVUE container tap that provides network traffic acquisition for containerized environments.

Amazon EKS, Azure AKS, VMware Tanzu, Red Hat OpenShift, and native Kubernetes are the platforms supported for UCT.

GigaVUE-VM to GigaVUE V Series Migration in VMware ESXi and NSX-V

You can now migrate your GigaVUE-VM visibility solution to GigaVUE V Series visibility solution on VMware ESXi and NSX-V.

Following are the two primary scenarios for GigaVUE V Series migration in GigaVUE-FM and in a GigaVUE-FM HA arrangement:

• Migrate from GigaVUE-VM to GigaVUE V Series on ESXi platform without any platform change.
• Migrate from GigaVUE-VM on NSX-V to GigaVUE V Series on NSX-T.
  • Migrate through NSX platform upgrade
  • Migrate through GigaVUE-VM on ESXi

GCB Packet Reordering

You can now use the packet reordering feature in your GCB solution to improve tool effectiveness. GCB waits for the pending packets from the requests and reorders the received packets to complete the transactions.

Export Application Metadata Intelligence output in JSON format

You can now use the Observability Gateway (OGW) application to export AMI output in JSON format. The OGW application converts the output from Application Metadata Intelligence (AMI) which is in CEF format into JSON format and sends it to cloud tools.

Embedded

E-Tag Based Clustering Enhancements

The below enhancements have been introduced in E-Tag based clustering such as:

GigaVUE FM Core

Export Data to External Data Server

GigaVUE-FM allows you to export statistical data from GigaVUE-FM to an external data server for analysis and visualization. The following data is exported from GigaVUE-FM (including the tags associated with the ports and maps) to an external data server:

• Port Statistics
• Map Statistics
• Map Rule Statistics

GigaStream Imbalance Notification

With the GigaStream imbalance notification functionality, the port statistics of the member ports in a GigaStream are validated to determine if traffic distribution across the ports is within the allowed threshold limit based on a threshold value configured. If traffic distribution is not within the allowed variance limit, the GigaVUE HC series and TA series devices generate SNMP traps that are sent to GigaVUE-FM based on which GigaStream imbalance alarms are triggered.

SNMP traps are generated in the devices based on the following conditions:

• Variance threshold % configured either through GigaVUE-FM or CLI
• Distribution of traffic between the ports (on a 30 second interval)

Fabric Health Analytics - Map Traffic Statistics

The Fabric Health Analytics feature in GigaVUE‑FM is enhanced with the new Map Traffic Statistics dashboard that displays statistics about traffic that has passed/dropped through the fabric to the destination(s).

Topology Visualization

The Topology page in GigaVUE-FM UI is enhanced as follows:

• Enhanced filter options. You can now:

  • Filter the devices based on the role
  • Save the filter
  • Show/hide unmatched devices

• Topology configurations are user-specific, that is, you can configure the topology as per your preference without affecting the views of other users.

• New UI Pages for Network Devices and Connections with the option to export and import the devices and connections.
• Smart layout now includes leaf-spine architecture.

IP Resolver (Supporting Multiple Dynamic NIC)

The IP Resolver page now allows you configure DNS server for more than one interface. This page has the following tabs:

• DNS Server
• Default Search Domains

GigaSMART

Supported Applications on Gen3 HC3

In SMT-HC3- C08 cards, the following GigaSMART applications are supported:

Supported Applications on Gen3 HC1

In SMT-HC1- S cards, the following GigaSMART applications are supported:

Vport Chaining within the same GigaSMART Group

The transit-level maps support Application Filtering Intelligence (AFI) and Application Metadata Intelligence (AMI) GigaSMART operations in SMT-HC0-Q02X08 of HC2P, SMT-HC3-C05 of HC3v2, HC1-X12G4 of HC1 with native, SMT-HC3-C08, and SMT-HC1-S cards.

GigaSMART GTP Rotational Sampling

GTP Rotational Sampling samples GTP sessions by IMSI number, using a rotating or sliding IMSI range, that rotates automatically on a configurable interval, without disrupting the treatment of existing sessions. It rotates through the entire pool of subscribers over time, such that all subscribers can be sampled in over time

Hardware

New GigaVUE-HC1-PLUS

The GigaVUE-HC1- PLUS is the latest member of the GigaVUE HC Series. It has a fixed module that supports ports of 4 x 100G/40 G, 8x25G, 10G, and 1G connectivity in a 1RU form factor.

It supports Flex-inline in unprotected ports with 100G/40G/10G/25G/10G/ speed. PRT-HC1-Q04, SMT-HC1-S, BPS-HC1-D25A60 and BPS-HC1-D35C60 modules are supported in GigaVUE-HC1-PLUS chassis.

Note:   Only Legacy PRT-HC1-Q04X08 and SMT-HC1-S modules are supported on GigaVUE-HC1-PLUS.

The following features will not be supported with this release on GigaVUE-HC1-PLUS:

Refer to GigaVUE-OS Compatibility and Interoperability Matrix to view supported optics.

New QSB 522 Transciever

100G/40G Dual Rate BiDi Transceiver Optic SKU QSB-522 is now supported.

Documentation

New Guides

The following three new guides are released:

Serviceability Enhancements

Cloud

Proper handling of multiple AWS accounts in single deployment

You can now monitor multiple AWS accounts or VPCs in a GigaVUE Cloud Suite for AWS monitoring domain.

Proper handling of multiple Azure subscriptions in single deployment

You can now monitor multiple Azure subscriptions or tenants in a GigaVUE Cloud Suite for Azure monitoring domain.

OpenStack OVS Mirroring support for VLAN Trunk Port

You can now use both access port and VLAN trunk port for the Open vSwitch (OVS) Mirroring on GigaVUE Cloud Suite for OpenStack.

GCB Transaction Logging

You can now choose to create GCB transaction log files to determine the failed transactions. For each HTTPS POST message from Pcapper to GCB, the GCB creates a transaction record. The transaction record is logged to a transaction log file in the GCB pod or to the Kubernetes logging stdout stream.

Cloud Health Monitoring

GigaVUE-FM allows you to monitor the configuration health status of the entire monitoring session and also the individual fabric components for which monitoring session is configured. This feature provides detailed information about the configuration and deployment status of the deployed monitoring session.

GigaVUE-FM HA on VMware NSX-T

GigaVUE-FM HA can be deployed in VMware ESXi and managed in VMware NSX-T Manager to provide uninterrupted services to the customers. You must configure external IP address while forming the HA cluster.

GigaVUE‑FM as image server for VMware NSX-T

You can now upload your V Series Node image files into GigaVUE‑FM. Instead of using an external server to upload your image files you can now directly upload your OVA files into GigaVUE‑FM.

Embedded

Flexible Inline Arrangement is now supported in GigaVUE-TA25

Flexible Inline arrangement functionality is now supported in GigaVUE-TA25. Due to the absence of BPS module and GigaSMART card Physical Bypass and Inline SSL functionality will not be supported. The Inline Bypass Solution (Classic) is not supported in GigaVUE-TA25.

E-Tag Based Clustering

Clustering can now be configured based on E-Tags on GigaVUE-HC Series and GigaVUE-TA Series. You can select E-Tag based stacking mode to enable this feature.

GigaVUE-FM Core

Configure PCAP from GigaVUE-FM

You can now configure Packet Capture (PCAP) from GigaVUE-FM. The port type used for packet capture can be tool, network, hybrid, inline or inline network. Packet capture functionality is now extended for the following:

Packet Capture configuration is available from the Ports page. Refer to the GigaVUE-FM User's Guide for details.

Delta Reports

GigaVUE-FM provides support for generating delta reports for Flow Filtering reports. Delta reports display statistical data for a specific time interval from the current time. Use delta reports to troubleshoot the flow filtering behavior across two different timestamps.

Enhancements to Alarms Page

- Alarm Drill down

Few of the alarms listed in the alarms page are now configured with hyperlinks to the source that triggered the alarm thus providing a quick view of the alarm resource and the reason for failure. The source-ID field of the following alarm types are configured as hyperlinks which when clicked opens the quick view of the resource or navigates to the respective resource pages:

The following new alarms are generated in GigaVUE‑FM when the device is unreachable or when the report is not generated:

The child alarm Health Indeterminable is triggered along with the parent alarms and will be listed as a correlated alarm.

Fabric Health Analytics

The Fabric Health Analytics feature in GigaVUE‑FM is enhanced with new dashboards and reports.

Fabric Asset Inventory: Displays inventory details of the devices managed by GigaVUE-FM and consists of the following data tables:

Fabric Health Dashboard now consists of two separate dashboards that display both metric and gauge visualizations.

The new Fabric Asset Inventory Report is added to the existing Reports list. Click on each of the items in the Report to navigate to the Discover page and to download the data tables in CSV format.

FIPS 140-2 Compliance in GigaVUE-FM

GigaVUE-FM is now compliant with the Federal Information Processing Standard (FIPS), a US government standard for security requirements of cryptographic modules. You can enable FIPS from the Preferences page in GigaVUE-FM. Once enabled, you cannot disable it. You can also create a FIPS enabled HA group.

Refer to the GigaVUE Administration Guide for details

Application Metadata Intelligence

Allow for disable of AMI CEF multi-collect​

This feature enables the multi-collect of attributes within a given Metadata Store cache which means that if a configured attributes is seen in multiple packets within the same flow, each of these information is collected. By default, when a new cache is created, multi-collect is enabled. When upgraded from an older release, the multi-collect option is enabled.

Advance-hash in Application Metadata Intelligence

This feature configures metadata cache advance-hash for encapsulated flows . This feature improves the efficiency of scheduling the distribution of encapsulated flows. It also improves the distribution of flows in service provider deployment cases. By default, when a new cache is created, advance hash is enabled. When upgraded from an older release, the advance hash is enabled.

AMI TEID Export on HC3 Gen3

In SMT-HC3-C08 cards, GigaSMART Application Metadata Intelligence supports the following packet attributes:

GigaSMART

Supported Applications on Gen3 HC3

In SMT-HC3- C08 cards, the following GigaSMART applications are supported:

Vport Chaining within the same GigaSMART Group

The transit-level maps supports multiple GigaSMART operations in SMT-HC0-Q02X08 of HC2P, SMT-HC3-C05 of HC3v2, HC1-X12G4 of HC1 with native, SMT-HC3-C08, and SMT-HC1-S cards.

GTP JSON

GTP Correlation engine can export records for each subscriber session. It only requires the GTP-C data to be input into the engine, and exports data in a streaming JSON format. This includes data such as subscriber ID, device ID, cell ID, session setup timestamp, and more. This data is used by metadata-ingestion tools.

Documentation

GigaVUE-FM Hardware Appliance Guide for GFM-HW1-FM010 and GFM-HW1-FM001-HW

This guide includes implementation information needed to get started with the GigaVUE-FM Hardware Appliance optimized module (GFM-HW1-FM001-HW) as a new, upgrading, or migrating customer.

GigaVUE TA Series Hardware Installation Guide

The GigaVUE TA Series Hardware Installation Guide is broken down and divided into the following guides:

Cloud

Support for V Series Node deployment using VMware NSX-T Manager

You can now deploy V Series Nodes through VMware NSX-T Manager. The deployed V Series Node can be monitored from GigaVUE-FM for traffic acquisition, processing and forwarding.

Supported GigaSMART operations on Microsoft Azure

GigaVUE Cloud Suite for Azure support the following GigaSMART Application Intelligence operations.

Embedded

Supported GigaSMART features on the 400G Link Traffic Aggregator

The GigaVUE-TA400 product consists of a 1RU, rack-mountable, 32 x 400G QSFP-DD/QSFP28/QSFP+ ports, dual hot-pluggable AC/DC power supplies, seven hot swappable fan modules, a serial console port, and a 10M/100M/1G management port. The following features are supported in 5.15 release such as :

GigaVUE-FM Core

Flow Ops Report Page Display Enhancement

The GigaSMART Report page now displays the report type, GigaSMART Group and the Pattern selected for generating the FlowOps report in the header pane with the time stamp of when the report was generated.

Flow Filtering Reports Usability Enhancement

GigaSMART Flow Filtering reports can now be generated as a single page. The links provided at the top of the report allows you to instantly navigate to the various sections in the report, thus eliminating excessive scrolling. The export button allows you to export the report in excel format with data captured in separate sheets for the different sections of the report.

API: /elasticUtils API

The  /elasticUtils API URL is now public and is available in the GigaVUE-FM swagger.

Documentation

This guide includes implementation information needed to get started with the GigaVUE-FM Hardware Appliance as a new, upgrading, or migrating customer.

Command Line Summary

This document summarizes the commands available in the command-line interface for the GigaVUE HC Series nodes. Commands are listed in alphabetical order with a summary of their syntax.

Cloud

Customer Orchestration of Traffic Acquisition for Azure

You can now configure GigaVUE Cloud Suite components like G-vTAP Controllers, G-vTAP Agents, and V Series Nodes through an external orchestrator like Azure Portal. The deployed fabric components can be monitored from GigaVUE-FM for traffic acquisition, processing and forwarding.

GCB Log Level Settings

With the GCB Log Level Setting, you can change the log level, modify the GCB log file size, and add miscellaneous log configuration messages for better logging and troubleshooting.

Geneve decapsulation for AWS

You can now choose the Geneve application from the GigaVUE Cloud Suite for AWS Monitoring Session canvas to acquire and strip Geneve headers. To route the traffic through the third-party network appliances seamlessly, the AWS gateway load balancer adds Geneve header to packets as they enter the VPC and strip these headers as the traffic leaves the VPC back into the servers. The third-party network appliances are expected to process traffic with these Geneve headers. When the GigaVUE-FM acquires the customer traffic, the packets are encapsulated in tunnels that are terminated in V Series nodes.

Cloud AMI/AFI Enhancements

You can now deploy multiple GigaVUE V Series nodes in a solution and use V Series Node API Proxy Server (VPS) to scale and manage multiple V Series nodes.

Red Hat certification of GCB on OpenShift

The GCB images are now "Red Hat Certified" for Red Hat OpenShift platform.
The Red Hat supported base images of the GCB applications are built on the top of Red Hat Universal Base Image or Red Hat Enterprise Linux Image.

Supports AWS Outposts

GigaVUE-FM now supports AWS Outposts. AWS Outposts is an on-premises extension of the AWS infrastructure, which allows you to make direct calls direct to AWS services (e.g., S3, EC2) from this solution.

Embedded

Flexible Inline Arrangement is now supported in GigaVUE-TA200

Flexible Inline arrangement functionality is now supported in GigaVUE-TA200. Due to the absence of BPS module and GigaSMART card Physical Bypass and Inline SSL functionality will not be supported. The Inline Bypass Solution(Classic)incompatibility remains same in GigaVUE-TA200.

Support Flexible Inline for Clustered GigaVUE HC Series Nodes

The GigaVUE HC Series nodes that can be now clustered with Flexible Inline solution for the following Flexible Inline features:

Resilient Inline Arrangement

Network Link Aggregation Group (LAG)

Asymmetrical Hashing

Single Tag vs Double Tag VLAN mode for GigaVUE-TA25

GigaVUE-TA25 can now configure the VLAN tag mode to be single tag or double tag at the chassis level. Single tagged mode will be the preferred mode of operation when the deployment environment needs the visibility of just untagged and single-tagged packets.

GigaVUE-FM Core

Topology Visualization enhancements:

• Port Discovery page: Allows bulk configuration of discovery protocols such as GDP, CDP and LLDP.
• Recently Viewed: Provides a list of recently viewed topologies. Click on a link to navigate to the topology.
• Manual Network Nodes and GTAP nodes: New options added in smart layout topology.
• View Option: Option to show and hide the external network nodes and tools.
• Edit Option: Ability to edit the topologies.

Fabric Health Analytics enhancements:

New system dashboards and corresponding visualizations have been added:

• Port Flapping
• GigaSMART Core Crash
• Fabric Map statistics (Physical)
• Port Capacity Planning

Ability to navigate from FHA Alarms and Events dashboards to GigaVUE-FM Alarms and Events pages (with filters applied).​

Fabric Health Analytics for Cloud enhancements:

New system dashboards and corresponding visualizations have been added:

• App(Virtual)
• Tunnel (Virtual)
• End Point Virtual

Enhancement to existing dashboards with the addition of Aggregate Summary panel

• Daily App Usage
• Daily Bundle Usage
• App Usage Summary
• Bundle Usage Summary

Dynamic Increase in GigaVUE-FM HA Instances

Until software version 5.13.00, GigaVUE-FM High Availability group was restricted to one active GigaVUE-FM instance and two standby GigaVUE-FM instances providing a scaled and resilient environment. As GigaVUE-FM is scaled up to manage many number of devices, higher computing and memory resources are required for the following reasons:

• Longer data retention period (up to 13 months).
• Better search performance with more horizontal distribution of Elastic Search for features such as Fabric Health Analytics (FHA), Topology Visualization.
• Better indexing performance with the number of instances collecting various statistics on the configured components.

Therefore, the number of Elastic Search instances has to be increased in the HA group for scalable performance of the various features in GigaVUE-FM. GigaVUE-FM now allows you to add more than three GigaVUE-FM instances to the HA group. You can add any number of instances to the HA group as required.

Port Packet Drop and Error Thresholds
GigaVUE HC series and TA series devices generate SNMP traps for packet drops and packet errors that occurs in the port for both ingress and egress traffic. The traps are sent to GigaVUE-FM based on which alarms are often triggered even for a single packet drop or error. You can now configure threshold values for port packet drop/error based on which the number of traps can be controlled.

Alarm Suppression

GigaVUE- FM allows you to suppress alarms that are raised during maintenance operation of a specific resource, cluster or node. You can suppress an alarm or alarms for a specific period or indefinitely by:

• Suppressing from Alarms page

• Suppressing from Physical Nodes page

You can also configure auto-suppression of alarms for certain GigaVUE-FM triggered operations on device such as Configuration Restore, Device Reboot, Image Upgrade on a cluster or node., and Cluster Creation Operations.

Support SNMP Traps for GigaVUE-FM Alerts

GigaVUE-FM sends SNMP v2c/v3 Trap notification for the GigaVUE-FM events such as Image Upgrade Status, Backup operation Status, etc., to the configured SNMP trap receivers.

GigaSMART

Optimized Elephant Flow processing for AFI

Application Filtering Intelligence detects and handles the elephant flows in the traffic. The feature is supported on the following GigaSMART modules:

• HC1-X12G4
• SMT-HC3-C05
• SMT-HC0-Q02X08

Supported Applications on Gen3 HC3 GigaSMART

The following GigaSMART applications are supported on the new SMT-HC3- C08 module:

• Masking
• Packet Slicing
• De-Duplication
• Adaptive Packet Filtering (APF) –– Supported without RegEX
• Application Session Filtering (ASF)
• Application Filtering Intelligence (AFI)
• Application Metadata Intelligence (AMI)
• GTP Whitelisting –– Non-CUPS GTP Correlation only
• GTP Flow Sampling –– Non-CUPS GTP Correlation only
• Load Balancing (Stateless)
• Load Balancing (Stateful)
• Tunnel Encapsulation
• Tunnel Decapsulation

Hardware

New Gen3 HC3 GigaSMART Module

The SMT-HC3-C08 module is the 3rd generation GigaVUE-HC3 GigaSMART module. This module is compatible only with Control Card version 2 (CCv2) and has two GigaSMART engines which have increased performance over the SMT-HC3-C05 module

New 400G Link Traffic Aggregator

The GigaVUE-TA400 product consists of a 1RU, rack-mountable, 32 x 400G QSFP-DD/QSFP28/QSFP+ ports, dual hot-pluggable AC/DC power supplies, seven hot swappable fan modules, a serial console port, and a 10M/100M/1G management port. The following features are not supported in 5.14 release such as :

Documentation

Inclusive Language Initiative

Gigamon is adopting inclusive language standards and is in the process of updating all of our content to remove exclusionary language wherever it exists, whether that be in Gigamon products and documentation, public-facing marketing materials, or internal communications. As we make these changes, we will announce updates to our terminology in our release notes and product documentation.

For more information, refer to Inclusive Language Initiative.

Cloud

V Series 2 on Azure

This feature is replacing the existing V Series 1 node with V Series 2 node environments with optional V Series Proxy for better efficiency and accessibility on Azure platforms. With the V Series 2 based solution, you can create ingress tunnels, use public IP address types, and use all the V Series 2 supported GigaSMART applications in Monitoring Sessions.

OVS Mirroring for V Series 2 on OpenStack

Now you can only select OVS Mirroring as your Traffic Acquisition Method for both OVS Mirroring and OVS Mirroring + DPDK. GigaVUE-FM can now auto detect and select the OVS Mirroring type required.

Service Identification on GCB

In the Service mesh and HTTPS/2 supported platform, the Pcapper sends HTTPS/2 requests to GCB. On receiving the HTTPS/2 request from Pcapper, GCB applies the rules configured in GigaVUE-FM and forwards the filtered traffic to Tools or V Series 2 Nodes through L2GRE or VXLAN tunnels.

These IP addresses of the Pcapper HTTPS/2 packets are temporary and the services running in multiple Kubernetes clusters can have same IP address. To correlate these ephemeral and same IP addresses, the GigaVUE-FM maps these ephemeral IP addresses with the corresponding source and destination CSV mapping files received from the Service Mesh and HTTPS/2 Supported platform and converts them to the external IPv6 addresses.

Dashboards for Cloud Statistics and Volume Based Licensing

This enhancement introduces the following dashboards and the associated visualizations:

Cloud Enhancements

Supported GigaSMART operations on AWS, OpenStack and VMware

GigaVUE Cloud Suite for AWS and GigaVUE Cloud Suite for VMware support the following GigaSMART Application Intelligence operations in GigaVUE-FM version 5.13.00:

SHA1 support has been removed in 5.13.xx to improve security. Refer to Addendum in the Release Notes v5.13.xx for details.

GigaVUE-FM Core

Fabric Health Analytics BETA

With Fabric Health Analytics, you can view the operational and health status of the various physical and virtual resources through the dashboards and visualizations. With this functionality you can:

The following new dashboards have been introduced:

Topology Visualization Beta

The Topology Visualization Beta page allows you to create tagged layout topology. For smaller deployments, GigaVUE-FM creates Smart Layout Topology.This feature is enhanced as follows:

Bulk Tagging

GigaVUE‑FM allows you to instantaneously,

• Bulk upload a large number of tag keys and tag values
• Assign tags to the resources such as nodes, clusters, ports, and maps.

Use the Import and Export Tags as Resources options in the Tags page to upload a CSV file containing the required fields.

Email Notifications

The Email Notifications functionality is enhanced such that:

• you can now schedule notification of specific events either as instant or digest notifications, depending on the configurations in the Scheduler page.
• send notifications to the permitted list of recipients added to the Permitted Recipients page.
• With the Test Email button in the Email Server page, you can send a test email for confirmation.

GigaVUE-FM UI Reorg

The GigaVUE‑FM GUI is enhanced as follows:

Note:  Save Config option is removed from the top navigation bar and moved under the Chassis option

Rule-level Tagging

You can now associate tags to map rules. Each rule within a map can be associated with different tags Ids and tag values. This is applicable for both flow maps and fabric maps.

The Map Statistics dashboard includes visualizations that allows you to view the statistics of the flow of traffic at the rule level.

GigaVUE‑FM Scale Enhancements

Provides a reliable and stable environment for managing a large number of physical devices (up to 3000 devices) without any impact to the performance.

The following changes are included as part of this release:

Note:  Support for VIP in GigaVUE‑FM High Availability cluster is deprecated from software version 5.13.00. If there is VIP configured in GigaVUE‑FM < release 5.13.00, it will be continued after the upgrade. You will only be able to delete the existing VIP from software version 5.13. You cannot add or update the VIP.

The GigaVUE-FM GUI is enhanced as follows:

• Add New TACACS+ page: ASCII AuthType added as an option.
• Support for entering 64 characters when configuring the password in the GigaVUE-FM GUI.
• 'Control Traffic' checkbox added to pass the GTP Control Traffic to all the GigaSMART engines in a GTP engine group.
• Near-Real Time view in the GigaVUE-FM GUI for the following changes related to Inline Bypass and Inline SSL Decryption:
  • Inline Network Forwarding State updates
  • Inline Tool Operational State and Flex Status
  • Inline Tool Group Operational State and Flex Status

These event-related updates will automatically get reflected in the respective pages. You can also use the Refresh button to view the Near-Real Time updates.

GigaSMART Mobility

Passive SSL Decryption with HSM Support on SMT-HC1-S (Early Access)

The Generation 3 GigaSMART card (SMT-HC1-S), now supports Entrust nShield Hardware Security Module(HSM) integrated with Passive SSL decryption.

Note:  Early Access is a pre-GA feature status indicating it is not recommended for production networks. The functionality has been tested. Little to no system testing has been performed, however, and performance/scale data is not yet available. Preliminary documentation is available.

MAC Address Rewrite

A user can now control or modify the Destination MAC and source MAC address of incoming traffic packets and deliver it to the tools according to the flow mapping configurations.

Support Flexible Inline for Clustered GigaVUE HC Series Nodes

The GigaVUE HC Series nodes can now be clustered with Flexible Inline solution for the configuration path. The traffic path is limited to a single node such that all inline network and tool ports should reside in the same node. The Flexible Inline features that can be configured are as follows:

Flexibility to Configure the PTP VLAN Range

The PTP VLAN ID range has been increased to 2-4000. Hover on the help icon to identify the available VLAN ID resouce.

The GigaVUE Cloud Suite for VMware Guide is now split into two separate guides:

Threat Detection

SMT-HC1-S (GigaVUE-HC1 Gen 3 module with ThreatINSIGHT Sensor support)

GigaVUE-HC1 supports a Generation 3 GigaSMART card (SMT-HC1-S), which gives 80Gb throughput and can be used to provide the ThreatINSIGHT solution for security detection.

Hardware:

SMT-HC1-S (Gen 3 GigaSMART Card)

Gigamon ThreatINSIGHT Sensor

Gigamon ThreatINSIGHT is a SaaS-based network security monitoring platform built with the ability to detect, respond, and investigate network-based threats. You can also deploy Gigamon ThreatINSIGHT Sensor on the GigaVUE-HC1 SMT-HC1-S module using GigaVUE-FM. It provides single, integrated security solution for threat-detection.

Fabric Management:

Gigamon ThreatINSIGHT Sensor

Fabric Management:

Supported GigaSMART Operations

Fabric Maps

Fabric Port Group

Extends GigaSMART load balancing functionality to fabric maps using circuit ids and circuit tunnels, thus allowing load balancing between tool ports that reside on different clusters.

Fabric Management: Fabric Port Group

Flexible Inline Arrangement

Resilient Inline Arrangement with Single VLAN Tag

Deploy resilient inline arrangement with a single VLAN tag in which, a packet received from an inline network is guided to the inline tool using a single VLAN tag, which is configurable when creating a flexible inline map.

Fabric Management: Configure Resilient Inline Arrangement

GigaVUE-OS

Microburst Enhancements

The Microburst performance in GigaVUE-OS devices have been improved such that devices have some amount of buffer to queue these packets.

Fabric Management: Microburst

High and Low Utilization for GigaSMART Engine Ports

GigaSMART engine ports now use high and low utilization threshold percentage. The utilization alarms will be forwarded to SNMP management stations configured as notification destinations.

Fabric Management: Set Port Utilization Thresholds

CLI Reference: portsnmp-server

Port Filter Statistics Enhancements

View the port filter counters based on the filter rules configured for the port.

Fabric Management: Port Filters

CLI Reference: port

New Active Visibility Conditions and Actions for Inline Tool Groups

You can now configure Active Visibility policies using conditions and actions that are newly added for inline tool group and flexible inline maps.

Fabric Management: Configure Active Visibility

CLI Reference: policy

Intent-Based Orchestration

Intent Based Orchestration Enhancements:

Fabric Management: Orchestrated Configurations

Mobility

GigaSMART TCP Enhancements

In 5G traffic, the GigaSMART TCP load balancing is performed based on the following correlations:

Fabric Management:

GigaSMART 5QI Correlation

In 5G traffic, 5QI values present in the control traffic and its associated QoS Flow Identifiers (QFI) value are correlated and the data traffic is sent to the tools.

Fabric Management: GigaSMART 5QI

Enhanced Application Session Filtering (ASF)

Enhanced Application Session Filtering allows to filter a specific application field from the incoming traffic. Enhanced Application Session Filtering supports the following session capabilities:

Netflow Cacheless export using TCP

NetFlow monitor enables you to set the cache timeout to zero and makes the NetFlow to operate in a cacheless mode. Each packet received by the NetFlow is treated as a complete flow and the metadata extracted from the packet are immediately exported without caching the flow. In cacheless mode, the metadata are direclty sent to the export buffer as they are not copied to the cache, thereby providing more record space.

GigaSMART Standalone User Plane Node Traffic Monitoring

In Standalone User Processing Node (UPN) traffic monitoring, the UPN processes the subscriber information that is extracted from the Packet Forwarding Control Protocol (PFCP) packets and correlates with the GTP-u traffic without the CPN.

Fabric Management: Stand-Alone User Plane Node Traffic Monitoring

GigaSMART 5G Network Slice Correlation

Network Slicing is a feature of 5G networks whereby slices of network resources are dedicated to a specific application. Gigamon enables customers to have differentiated levels of visibility for each network slice.

Fabric Management: 5G Network Slice Correlation

GigaSMART RAN Correlation

This feature enables the support for RAN based correlation for both 4G CUPS and 5G CUPS solutions. The monitoring of core traffic is based upon the RAN source. It exposes RAN data fields from control plane. RAN data fields are available for filtering and whitelisting.

Fabric Management: 5G RAN Correlation

Enhancements to 5G CUPS Configuration using Ansible

The Gigamon Ansible Module exposes playbooks that allows the configuration and maintenance of the CUPS solution, and the GigaVUE-FM GUI allows you to visualize, monitor and troubleshoot the CUPS solution.

Fabric Management: Configuration of CUPS using Ansible.

FM Core

Information Architecture and GUI Reorganization

Improved and modernized user experience. Ease of accessibility of the physical and virtual nodes and the solutions.

Fabric Management:

Alarms for Inline Networks and GigaSMART Operations

Alarms to track the changes in the health status of the inline network configurations and the GigaSMART Operations.

Administration

GigaVUE-FM Scale Enhancements

Provides a reliable and stable environment for managing large number of physical devices without any impact to the performance. Includes the following changes:

Fabric Management:

Administration:

Security

Protocol Signature Enhancements

Upgrade the protocol signature by upgrading the image file on the card, and by uploading the GigaSMART card image to GigaVUE-FM from the Internal Server or External Server.

Fabric Management:

Application Intelligence Session

Software Licensing

Volume based licensing for V Series on VMware

Volume-Based License (VBL) is introduced to support V Series for VMware virtual device environments. In this model, instead of being assigned to a specific physical chassis or GigaSMART card, your license is based on the volume of data usage across many virtual devices gathered per available statistics collected in GigaVUE FM. The data measured is the raw ingress traffic on V Series nodes, GCB/GvTAP devices and licensed apps such as masking, slicing, and de-duplication on V Series nodes. With VBL you can also monitor and analyze your data usage daily, within specific service periods, or spanning multiple service periods.

Note:  If you are using Volume Based Licensing, please make sure that smtp.gmail.com access on port 25 of the GigaVUE-FM host machine is not blocked by firewall ACL (Access Control List) rules or a proxy server. If it is blocked, it will prevent GigaVUE-FM from sending the mandatory emails regarding volume usage to Gigamon at the end of each collection period (normally 3 months).

GigaVUE Cloud Suites:

Base Bundles

GigaSMART Security

RFS Configuration to Manage Encrypted Keys

Use Remote File System (RFS), a component in HSM to store and manage encrypted keys

Fabric Management:

Entrust nShield HSM for SSL Decryption for Out-of-Band Tools

CLI Reference :

apps hsm-group

Split DNS Profile Configuration for GigaSMART Engine Port

Configure separate DNS servers for internal and external networks to ensure better security and privacy management

CLI Reference:

Cloud

Network visibility with V Series nodes on VMware ESXi and NSX‑T

This feature is replacing the existing GVMs with V Series 2 fabric node for better efficiency and accessibility on VMware environments. With the V Series based solution, users can create Monitoring Session instead of configuring vMaps and use Automatic Target Selection instead of manual vNIC selection in VMware ESXi and NSX-T.

Software

GigaVUE-OS on DELL S4112F-ON

Introducing the GigaVUE‑TA25 Chassis

GigaVUE-OS on DELL S4112F-ON Installation Guide

Hardware

GigaVUE-TA25

Introducing the GigaVUE‑TA25 Chassis

GigaVUE-TA Series Hardware Installation Guide