About Application Intelligence

GigaVUE‑FM Application Intelligence provides a comprehensive solution that:

■ identifies the applications contributing to the network traffic.

■ isolates preferred application-specific traffic and directs it to the appropriate tools.

■ exports relevant application metadata for further analytics and analysis.

Application Intelligence Capabilities

Application Intelligence provides the following capabilities for both physical devices and virtual nodes:

■   Application Visualization (earlier known as Application Monitoring) - Identifies and monitors all applications contributing to the network traffic, and reports on all applications, and their application families and tags and the total bandwidth they consume over a select period. Able to identify up to 4,300 applications. It displays the traffic statistics in bytes, packet and flows.
■   Application Filtering Intelligence - Enables traffic filtering by layer 7 applications, which means you can filter out high-volume, low-risk traffic from reaching the tools and direct high-risk network traffic of interest to the right tool at the right time.You can select applications based on the application name, family or tags.
■   Application Metadata Intelligence - Supports exporting up to 6000 attributes of metadata that provide relevant usage context on up to 4,300 applications, thus enabling you to rapidly identify indicators of compromise (IoC) for security analytics and forensics tools.
■   Application Metadata Explorer-Enables ingesting application metadata in cloud-native tools. It converts CEF records from Application Metadata Intelligence (AMI) into JSON or OCSF format. JSON records can be exported over HTTP, HTTPS or Kafka. It can also enrich metadata from user-plane traffic with control-plane metadata for mobile networks or enrich application metadata with key host environment details for cloud workloads. Refer to Application Metadata Exporter to know more.

Note:  Application Intelligence requires a separate GigaSMART engine or engines in group.

Supported Platforms

Application Intelligence is supported on the following platforms :

  • GigaVUE‑HC1
  • GigaVUE‑HC3
  • GigaVUE‑HC1-Plus
  • GigaVUE-HCT
  • VMware ESXi
  • VMware NSX-T
  • GigaVUE Cloud Suite for AWS
  • GigaVUE Cloud Suite for Azure
  • GigaVUE Cloud Suite for Third Party Orchestration
  • GigaVUE Cloud Suite for OpenStack

Refer to Supported GigaSMART Operations for more details on the devices that support GigaSMART operations.