NetFlow and Metadata Generation

Reduce time to threat detection without jeopardizing performance.

Flow Data: Gain Insights. Take Action.

As chipset capacity increases, security and monitoring tools are being forced to process more and more data, which overloads the tools. The solution? Metadata.

With NetFlow and Metadata Generation, enterprises can:

  • Extract essential information to reduce the amount of data that security tools will consume leading to better security efficacy
  • Detect threats faster by analyzing metadata versus raw packet streams
  • Overcome limited reach of security tools that may not have access to all the valuable information in the network by sending them summary information
  • Separate signal from noise and help reduce false positives by the tools


 

What is metadata?

Metadata is data about data that describes and summarizes information about your raw network packets (based on Layer-4 and Layer-7 information), such as: 

  • Summary statistic information about network traffic flows
  • Critical details about the flow (5-tuple, protocol information)
  • Application-level insights based on Layer-7 traffic information to enable successful analysis across on-premises and public cloud infrastructures.

The Gigamon Metadata Generation capability supports CEF and NetFlow, a network protocol that is used to collect statistics on IP traffic information such as IP source, destination of traffic, class of service, causes of congestion, etc. NetFlow is a specific, standard form of metadata that provides visibility into traffic types and usage patterns across systems, enabling enterprises to catch denial of service attacks, data extraction, and other events that represent a security risk.

Gigamon has also extended Netflow Generation to include IPFIX, enabling application-specific extensions, as well as standard traffic information across on-premises and public cloud environments.

By offloading metadata generation to the Gigamon Visibility Platform, enterprises can leverage their valuable production network tools more efficiently - reduce the noise and only send useful data to them.

ON-DEMAND WEBINAR

Reduce Time to Threat Detection

Learn how to supercharge your incident response with Metadata.

FEATURE BRIEF

NetFlow and Metadata Generation

Solve the problem of too much data, too little compute with Metadata.

CASE STUDY

Clemson University

Balacing network performance and security to connect and protect today's great minds.

Training: Using Metadata to Enhance Visibility

Get the most out of your visibility and security investments with free online learning. Learn how the GigaSECURE® Security Delivery Platform uses Metadata to enhance visibility.

Man looking at a phone

Related Pages

GigaSECURE Security Delivery Platform

CORE SOLUTION

GigaSECURE

Route the right traffic to the right tools.

GigaVUE-HC1

VISIBILITY APPLIANCE

GigaVUE-HC1 Appliance

Compact appliance that aggregates and optimizes network data.

GigaVUE-HC2

VISIBILITY APPLIANCE

GigaVUE-HC2 Appliance

Multi-purpose, mid-sized appliance built to address complex requirements.

 

GigaVUE-HC3

VISIBILITY APPLIANCE

GigaVUE-HC3 Appliance

High performance appliance that enables comprehensive traffic insights.