What's New

Support for Zero Touch Upgrade of UCT-V

You can now upgrade UCT-V in the workload VM without any hands-on involvement through GigaVUE-FM.

Refer to Upgrade or Reinstall UCT-V for more details.

Support for Zero Touch Installation of UCT-V for Linux and Windows

Installation process of UCT-V for Linux and Windows is simplified using installation script. This feature reduces the current manual installation process steps up to 0 by using cloud integrated scripts.

Refer to Linux UCT-V Installation and Windows UCT-V Installation for more details.

Monitoring Session Workflow Improvements - Phase 1

Monitoring Session work flow usability is simplified for seamless navigation, smoother and more intuitive experience with reduced redundant steps.

Refer to Configure Monitoring Session for more details.

Support for GigaVUE-FM HA in Third Party Orchestration

This feature offers Third Party Orchestration support in GigaVUE-FM HA in OpenStack environment.

Refer to GigaVUE‑FM High Availability and Configure GigaVUE‑FM High Availability in OpenStack Environment for more details.

Support for GENEVE Protocol in Header Stripping Application

With this feature, you can now inspect packets for the GENEVE header and remove them before sending the packet to the appropriate security and analysis tools.

Header Stripping for GENEVE protocol is supported in the following platforms:

Refer to Header Stripping for more details.

Support for Creating Multiple Monitoring Domains with the Same VMware NSX-T Manager

You can now use a single VMware NSX-T Manager to create multiple Monitoring Domains in GigaVUE-FM, provided each Monitoring Domain has unique VMware vCenters associated with it.

Refer to Create Monitoring Domain for VMware NSX-T for more details.

Support to Enable and Disable Administrative State for Egress tunnels

GigaVUE-FM allows you to stop sending traffic to unreachable tools or tools that are in a down state. Each egress tunnel configured on the GigaVUE V Series Node has an administrative state that enables GigaVUE-FM to halt the tunnel's traffic flow. This administrative state is enabled by default. The tunnels will only be disabled by GigaVUE-FM when it receives a notification via REST API indicating that a tool or group of tools is down.

Refer to Create Ingress and Egress Tunnels for more details.

Base Bundle for Default Trail License is changed to SecureVUE Plus

GigaVUE-FM offers a free 1TB SecureVUE Plus trial Volume-Based License (VBL) for 30 days, starting from the installation date.

Refer to Default Trial Licenses for more details.

Proxy Server Configuration in GigaVUE-FM

The Proxy Server configuration page enables users to create proxy server profiles that can be utilized for URL categorization and certificate revocation status updates thus enhancing network security. The proxy profile is then attached to a device by configuring it in the Inline SSL application. This is applicable only for Gen 3 nodes.

Refer to Proxy Server Configuration for more details.

NTP Server for Clock Synchronization

GigaVUE-FM allows you to configure multiple NTP servers and ensures NTP settings are retained after upgrades. You can configure NTP using the server's DNS Name or IPv6 or IPv4 address.
In GigaVUE-FM, you can add, delete, and view the status of each NTP server configured. You can authenticate NTP servers to verify that time updates come from a trusted server, ensuring the integrity and security of synchronization.

GigaVUE-FM allows you to authenticate NTP servers only with valid Chrony keys. If the keys are invalid, GigaVUE- FM will not fallback to the NTP server without authentication. You must delete the unauthenticated servers.

Refer to NTP Server for Clock Synchronization for more details.

Support for UEFI Secure Boot

Secure Boot is a Unified Extensible Firmware Interface (UEFI) feature that provides a verification mechanism for ensuring the device boots using only authorized firmware and software. It prevents running unauthorized, untrusted code. Without Secure Boot, malicious code can easily be executed, and Gigamon platforms can be easily compromised.

GigaVUE-FM supports the UEFI secure boot in the following platforms:

Refer to UEFI Boot for more details.

Flexible Inline Arrangement support in GigaVUE‑TA400

The Flexible Inline Arrangements are now supported in GigaVUE‑TA400.

Refer to Flexible Inline Arrangements for more details.

keep-only-syslog and keep-ports

The newly introduced keep-only-syslog and keep-ports CLI commands offer improved recovery by preserving essential syslog files and port configurations during resets, ensuring minimal system downtime and disruption to network traffic.

Refer to reset for more details.

L2 MPLS Header Stripping for packet formats without CW/ACH

GigaVUE-TA400 now provides expanded support for L2 MPLS Header Stripping. Previously, L2 MPLS stripping was supported only for packets containing a Pseudo Wire (PW) Control Word (CW) or Associated Channel Header (ACH). With this update, the GigaVUE-TA400 supports L2 MPLS Header Stripping for packet formats without CW/ACH. This feature can be configured through the command-line interface (CLI) and GigaVUE-FM.

This enhancement broadens the range of L2 MPLS packet types that can be processed, providing greater flexibility and improving the handling of MPLS traffic within your network infrastructure. The newly introduced keep-only-syslog and keep-ports CLI commands offer improved recovery by preserving essential syslog files and port configurations during resets, ensuring minimal system downtime and disruption to network traffic.

Refer to Enable Header Stripping Protocol and Port for more details.

Zero Touch Provisioning (ZTP)

Zero Touch Provisioning (ZTP) now automates device deployment with minimal user intervention, particularly after a factory reset or fresh installation. With ZTP enabled by default, the device automatically connects to the network, fetches its configuration from a pre-configured source, and provisions itself using custom .conf files defined by the user.

Refer to Zero Touch Provisioning (ZTP) and system for more details.

Replace the Decrypt/No-Decrypt List

You can now configure to replace your uploaded Decrypt/No-Decrypt List. The Replace option would delete the previously added list and replace it with a new Decrypt/No-decrypt list. This option is supported only on Generation 3 cards.

Refer to Configure Flexible Inline Decryption for more details.

GigaSMART APF Regex Support for Gen 3 GigaSMART Module

We have enhanced the Advanced Packet Filtering (APF) feature to include Regex pattern matching on the Generation 3 modules of GigaVUE-HC1, GigaVUE-HC1 Plus, GigaVUE-HCT, and GigaVUE-HC3 devices. This helps reduce tool overload and prolongs the lifespan of your security and monitoring tools by enabling more effective filtering of relevant traffic.

Refer to GigaSMART Adaptive Packet Filtering (APF) for more details.

PFCP packets are processed independent of Interface qualifiers

Interface qualifiers that are configured in second-level map filtering rules are not applied to PFCP packets. Instead, PFCP packets will be matched against other configured rule qualifiers. This allows the tool to learn about all PFCP sessions. This approach facilitates session handovers between N3 and S5/S8 by processing PFCP independently of the interface qualifiers.

Refer to Custom Interface Selection for more details.

Integrated License Management in GigaVUE‑FM

With the introduction of the integrated license feature, you can now establish direct communication between GigaVUE‑FM and the license s/b server by generating a token from the license portal and registering it in GigaVUE-FM. Once registered, you can view, manage, and activate entitlements directly from GigaVUE-FM, eliminating the need to manually upload and download files. Additionally, the volume-based license (VBL) usage data is automatically captured from each GigaVUE-FM instance and sent to the license s/b server for tracking.
This feature greatly simplifies the license management process, reduces the potential for manual errors, and offers enhanced control and flexibility over licensing.

Note:  Registration mechanism will be enabled soon. Contact your sales or support representative for more

Refer to Integrated License Management in GigaVUE‑FM for more information.

The GigaVUE-HCT now supports the BPS-HC1-D25A60 (multi-mode SR 1Gb/10Gb) and BPS-HC1-D35C60 (single-mode LR 1Gb/10Gb) bypass modules, as well as the PRT-HC1-X12, which provides twelve 1Gb/10Gb SFP+/SFP ports for network, tool, hybrid, circuit, stack, inline network, and inline tool connections.

Refer to Bypass Combo Modules and PRT-HC1-X12 Module for more information.

The newly introduced ZR-optics command configures interoperability between Innolight 400Gb and Cisco ZR/ZR+ optics when connected to GigaVUE-TA400 and paired with Cisco routers under OpenZR compliance. It manages key low-level parameter tuning for enhanced connection stability and performance, ensuring seamless integration without additional licensing requirements.

Refer to Port for more information.