Secure Access Complete Visibility

Transcription

1 PACKET CAPTURE APPLIANCE PACKET CAPTURE APPLIANCE PACKET CAPTURE APPLIANCE PACKET CAPTURE APPLIANCE Intrusion Detection Switch TAP Data Recorder VoIP Analyzer Switch Secure Access Complete Visibility Web Monitor

2 Rdy M/S Mgmt Console /100/1000 PORTS G PORTS 7 8 X1 X2 1G/10G PORTS GigaPORT-SFP GigaVUE-212 Data Access Switch The World s Most Powerful Economically Priced Data Access Switch The GigaVUE-212 TM is an entry level Data Access Switch which aggregates, replicates, filters and load divides traffic flows across multiple passive monitoring tools at a fraction of the cost of similar devices. The switch supports eight 1Gbps ports and two 10Gbps ports with an optional expansion module supporting another four 1Gbps ports. The GigaVUE-212 is ideal for data centers and enterprises which either require a low-cost option in order to enhance their network monitoring for the first time, or who have areas of their network where they need lower port counts to support comprehensive monitoring. Mesh Switch Topology GigaVUE-212 Firewall Router GigaVUE-212 With support for plug-in of multiple out-of-band tools, the GigaVUE-212 enables enterprises and data centers to connect any tool to any data stream unobtrusively for an entry level price. The GigaVUE-212 family: GigaVUE-212, base chassis with eight 1Gbps & two 10Gbps ports GigaPORT copper or optical 4-port expansion module Data Recorder Analyzer Forensic Recorder Performance Management The GigaVUE-212 features: Span port sharing among multiple tools Filtering and customizable data flows to each tool Load dividing across multiple tools Aggregation to multiple links and tools Consolidation of distributed tools to reduce expenditures Near zero latency architecture allows for accurate measurement of time sensitive protocols and QoS Secure Access Complete Visibility

3 Mgmnt Console M/S Rdy GigaVUE-420 Data Access Switch Need More Access to 1Gbps and 10Gbps Connections? The GigaVUE-420 Data Access Switch provides a cost effective solution to monitoring service provider and enterprise networks. Network engineers who face the problems of multiple network segments to monitor, multiple tools to deploy and too few SPAN ports can now easily solve all of these issues. Any-to-Any connectivity to solve tool deployment problems Increase network visibility by utilizing aggregation Intelligently filter and divide loads to customize and manage data to different tools Replicate traffic to multiple tools to share data sources Manage connections and filters with Citrus TM GUI or CLI Monitor 10Gbps links with 1Gbps tools Gigamon Systems Mesh Topology Giga PORT Firewall Router Giga PORT Giga PORT Giga PORT GigaVUE-420 The GigaVUE-420 features four 10Gbps ports and twenty 1Gbps ports in a 1U chassis. The system can be managed remotely by telnet or SSH2, and authenticated with TACACS+ or RADIUS. Enable hardware filters based on any pattern in the header to eliminate unwanted packets. Protocol Analyzer Forensic Recorder Intrusion Detection Web Monitor Network engineers can now isolate and capture sessions across parallel links and switches, reducing and customizing data flows to each tool as needed. Tools can be added without affecting the production network at any hour without configuration management review. The GigaVUE-420 family of products feature: 10-GigaTAP dual fault-tolerant taps for 10Gbps optical links GigaTAP dual fault-tolerant taps for 1Gbps copper or optical links GigaTAP Bypass module for active in-line appliances GigaPORT copper or optical 4-port expansion modules GigaLINK copper or optical 10Gbps port modules By stacking multiple GigaVUE-420 devices, engineers can form a high-density access fabric of over 500 ports, for extensive distribution to network monitoring tools.

4 Gigamon Mgmt Console M/S Rdy 10/100/1000 PORTS (SFP) G1 G2 G3 G4 G1 G2 G3 G4 1 1G/10G PORTS (SFP+) 1 2 1G/10G PORTS (SFP+) G/10G PORTS (SFP+) SLOT 2 PORTS 9 16 SLOT 1 PORTS G1-G4 PORTS 1-8 SLOT 3 PORTS GigaVUE-2404 High Density 10G Switch Getting serious about accessing multiple 10Gbps links? The GigaVUE-2404 provides a new way of enhancing and centralizing monitoring capabilities, reducing the network monitoring footprint while lowering total network management cost and giving day one ROI. Enable IT & Data Center consolidation Lower total network management cost Improve efficiency of monitoring tools Reduce network management footprint Eliminate change orders and down-time Routers Firewalls Targeted at the most demanding 10Gbps networks, the GigaVUE-2404 extends total visibility across the entire network. Application Servers IntelligentDAN TM Mesh Topology 10GigaPORT-8X GigaVUE-2404 Any tool can be connected to any data source at any speed or media at any time making the monitoring of your 10Gbps network affordable and easy to manage. The GigaVUE-2404 evolves from the proven architecture of the industry standard GigaVUE-420 and features up to twentyfour 10Gbps ports and four 1Gbps ports in a low profile 2U chassis. Available 10Gbps TAP modules simplify access and further save on hardware cost. UP WHEN INSTALLED IN REAR SLOT Application Monitor GigaVUE-2404MB 10GigaPORT-8X Intrusion Detection Packet Analyzer RMON Probe Traffic Recorder The GigaVUE-2404 family of products feature: Intelligent packet filtering at full line rate Aggregation of multiple traffic flows Replication of packets from one SPAN or TAP to many tools GigaStream load dividing technology GigaSMART packet modification technology Monitor 10Gbps links with 1Gbps tools Monitoring tools used for intrusion detection, VoIP, forensic recording and protocol analysis can be deployed immediately without impact to the production network. Traffic from the entire network can now be monitored even across parallel or mesh topologies. Furthermore, by stacking multiple GigaVUE-2404 devices, engineers can use a star or daisy-chain topology for multi-terabit bandwidth to monitor large data center environments.

5 GigaSMART Packet Slicing Masking Port Labeling Time Stamping The Industry s First Line Rate Packet Modification Technology The GigaSMART TM blade is an entirely new way to enhance monitoring tools, allowing tools to perform analysis more efficiently and accurately. A networking industry first, GigaSMART significantly enhances the capabilities of Gigamon s GigaVUE-2404 platform, creating the ability to modify packets at line-rate and add valuable information by packet slicing, masking, ingress port labeling and time stamping. Network monitoring tools can now perform more efficiently by further eliminating unwanted content with the packet slicing feature. Masking allows network security teams to hide confidential information like passwords, financial accounts, or medical data to keep companies compliant with SOX, HIPAA and PCI regulations. Add source or timing information at the point of collection with the ingress port labeling and time stamping capabilities. Gigamon pioneered Intelligent Data Access Networking technology for easier and lower cost deployment and management of multi-tool environments. Gigamon s innovative solutions address new demands for reporting and analyzing an organization s data and enhancing the ability to view and troubleshoot increasingly complex networks. By aggregating, filtering and replicating customized data streams to all monitoring tools, GigaVUE ensures seamless and controlled delivery of the right data at the right time to the right tools. Packet Slicing: Reduce packet size to increase processing and monitoring throughput Optimize the deployment of forensic recorder tools Enable more data storage in a recording appliance Masking: Conceal private data including financial and medical information Empower network monitoring tools to perform their task and maintain PCI and HIPAA compliance Increase network security from internal threats Ingress Port Labeling: Label packets to indicate the ingress port Identify where a packet is coming from easily Enhance the efficiency of your network monitoring tools by eliminating the potential of duplicate data streams in a multicast environment Time Stamping: Packet time stamps at line rate for subsequent analysis Troubleshoot and measure application response times, jitter and latency

6 Citrus GigaVUE Web GUI Point. Click. Configured. Citrus is the latest innovation from Gigamon that provides security engineers with an intuitive (GUI) Graphical User Interface for configuring your GigaVUE hardware and filters. Packet distribution is where the real power of GigaVUE is on display. It s where you decide how traffic arriving on network ports should be sent to tool ports. You ll decide which traffic should be forwarded, where it should be sent and how it should be handled when it arrives. The Graphical User Interface allows network engineers to configure switches or ports for maximum efficiency. Citrus also offers (CLI) Command Line Interface integration, allowing users to apply hundreds, even thousands, of filters in a matter of seconds. The Citrus GUI brings an even higher level of power to the GigaVUE, a modular, packet-aware device. GigaVUE Data Access Switches provide dynamic connectivity for a large number of monitoring tools such as intrusion detection systems, data recorders, VoIP analyzers and other devices. Filter Set-Ups: In the Connection window, each port is listed with its own entry; users can change icons, port aliases, types and filters as desired. Connections, maps, and pass-alls are easily rendered by dragging lines between network elements. Flow Mapping: The Flow Mapping window enables simple configuration of Layer 2, 3, & 4 traffic. Because maps are listed in individual containers, you can click different elements to easily change mapping or to add new rules. CLI Integration: Citrus allows engineers to manage complex configurations by copying and pasting script into the CLI window. The embedded CLI allows pre-defined map rules to be easily inserted. Citrus supports TACACS+ and RADIUS servers, and supports connections between any tool and any data, at any time. About Gigamon Gigamon has been shipping its intelligent data access solutions for more than six years and has successfully deployed its Data Access Switches in hundreds of networks and data centers in over 40 countries. Gigamon s product suite seamlessly aggregates, filters and replicates traffic of interest to multiple monitoring and security tools and continues to experience exponential growth due to the dynamic needs related to accessing and viewing important network data. Having recently moved into a state-of-the-art facility in the heart of Silicon Valley and doubling its talent roster, Gigamon continues to grow globally by building its sales channel with Value Added Resellers and consistently adding Technology Alliance Partners. Gigamon 598 Gibraltar Drive Milpitas, CA PH FX info@gigamon.com