Gigamon Visibility App for Splunk
New levels of network security with visibility
Splunk Enterprise users need targeted, summarized data to help improve security efficiency and reduce the time to detection. The Gigamon Visibility App for Splunk combined with the GigaSECURE® Security Delivery Platform allow SecOps teams to achieve network and security operational excellence. GigaSECURE provides granular, customizable traffic visibility to Splunk apps while the Gigamon Visibility App for Splunk enables operational intelligence.
Use Cases: Gigamon Visibility App for Splunk
- Customers who do not have easy access to security metadata for protocols such as DNS, HTTP and Certificates, but need them for analytics and forensics
- Customers using Splunk Enterprise for SIEM analytics who also need wire and packet traffic data in addition to text/log data
- SecOps and NetOps teams who need operational intelligence from the Visibility Fabric™ to augment alerts from security appliances
Gigamon and Splunk: flexible deployments
The Gigamon Visibility App for Splunk (downloadable from the Splunk Store) can provide SecOps and NetOps teams with insight into the health and analytics of networks supported by the GigaSECURE® Security Delivery Platform.
Figure 1 : The GigaSECURE platform provides traffic visibility to the Splunk apps and the Gigamon Visibility App for Splunk enables operational intelligence.
In a multi-vendor SIEM deployment with Splunk, operators can use:
- Third-party vendor appliances to trigger security alerts to Splunk Enterprise based on KPIs
- The Gigamon Visibility App for Splunk to visualize the policies and source of the traffic that caused the alerts
Figure 2 : Multi-vendor SIEM deployment where Gigamon Visibility App for Splunk enables operational intelligence
Resources
Solution Brief
Gigamon Visibility App for Splunk
White Paper
Rethinking Network Security Deployment
Web Page
GigaSECURE® The Industry’s First Security Delivery Platform
Deployment Guide
Deploying Gigamon with Splunk®
Explore our offerings.
Deliver Security with GigaSECURE
Fight cybercrime with the Gigamon Security Delivery Platform.
Traffic Intelligence: GigaSMART
Extend the intelligence and value of GigaVUE Visibility Nodes with GigaSMART.
Centralized Management
Get centralized, single pane-of-glass management with GigaVUE-FM.
See More: GigaVUE Visibility Nodes
Get pervasive, scalable, intelligent visibility into all your network traffic.
- ©Gigamon 2022