Decrypt and expose malware with SSL/TLS Decryption.
Solution Brief: Investigate, hunt, detect and respond to threats with Gigamon Insight
Video: Moving to the Cloud with GigaSECURE®
ebook: A Sampling of Malicious E-Mail Attachments
Gigamon Applied Threat Research Team
Flow Data: Gain Insights. Take Action.
As chipset capacity increases, security and monitoring tools are being forced to process more and more data, which overloads the tools. The solution? Metadata.
With NetFlow and Metadata Generation, enterprises can:
- Extract essential information to reduce the amount of data that security tools will consume leading to better security efficacy
- Detect threats faster by analyzing metadata versus raw packet streams
- Overcome limited reach of security tools that may not have access to all the valuable information in the network by sending them summary information
- Separate signal from noise and help reduce false positives by the tools
What is metadata?
Metadata is data about data that describes and summarizes information about your raw network packets (based on Layer-4 and Layer-7 information), such as:
- Summary statistic information about network traffic flows
- Critical details about the flow (5-tuple, protocol information)
- Application-level insights based on Layer-7 traffic information to enable successful analysis across on-premises and public cloud infrastructures.
The Gigamon Metadata Generation capability supports CEF and NetFlow, a network protocol that is used to collect statistics on IP traffic information such as IP source, destination of traffic, class of service, causes of congestion, etc. NetFlow is a specific, standard form of metadata that provides visibility into traffic types and usage patterns across systems, enabling enterprises to catch denial of service attacks, data extraction, and other events that represent a security risk.
Gigamon has also extended Netflow Generation to include IPFIX, enabling application-specific extensions, as well as standard traffic information across on-premises and public cloud environments.
By offloading metadata generation to the Gigamon Visibility Platform, enterprises can leverage their valuable production network tools more efficiently - reduce the noise and only send useful data to them.
ON-DEMAND WEBINAR
Reduce Time to Threat Detection
Learn how to supercharge your incident response with Metadata.
FEATURE BRIEF
NetFlow and Metadata Generation
Solve the problem of too much data, too little compute with Metadata.
CASE STUDY
Clemson University
Balacing network performance and security to connect and protect today's great minds.
Our Partnership
IBM QRadar SIEM delivers analytics-based security intelligence to help security operations and incident response teams detect anomalies and defend against advanced threats.
Our Partnership
Phantom automates and orchestrates key stages of security operations from prevention and detection to triage and resolution.
Our Partnership
Splunk delivers analytics-based security intelligence to security operations and incident response teams.
Training: Using Metadata to Enhance Visibility
Get the most out of your visibility and security investments with free online learning. Learn how the GigaSECURE® Security Delivery Platform uses Metadata to enhance visibility.
Related Pages
CORE SOLUTION
GigaSECURE
Route the right traffic to the right tools.
VISIBILITY APPLIANCE
GigaVUE-HC1 Appliance
Compact appliance that aggregates and optimizes network data.
VISIBILITY APPLIANCE
GigaVUE-HC2 Appliance
Multi-purpose, mid-sized appliance built to address complex requirements.
VISIBILITY APPLIANCE
GigaVUE-HC3 Appliance
High performance appliance that enables comprehensive traffic insights.