Gigamon Deep Observability App is for customers who wants to use precanned dashboards. The search queries are written based on the JSON feed from Gigamon Cloud Suite This app has the below list of use cases: 1. Security Posture Use cases to detect and remediate flaws in securing the applications in the network. This gives visibility into weak cipher, untrusted certificates, signature algorithms 2. Anomalous Traffic Detect and remediate challenges with DNS, HTTP, and HTTPS traffic in the network 3. Troubleshooting Detect and remediate network delay, connectivity, and protocol errors in the network. For ex server vs network latency, TCP Ip connectivity issues, DNS issues. 4. Suspicious Activities Detect and remediate issues related to unmanaged devices, suspicious connections, and traffic outside norms in the network. For ex: IOT unmanaged devices, unwanted services and port misuse 5. Rogue Activities Detect and remediate unsanctioned applications that can pose challenges to your network and security. Ex: Unsanctioned p2p Apps, crypto jacking. 6. M-21-31 Logging U.S. Office of Management and Budget M-21-31 logging requirements. AMI metadata can be used for HTTPS,HTTP, DNS, Shadow IT, IOMT protocol activity and OT monitoring, to meet the logging requirements 7. PCI Compliance Helps organizations validate their PCI compliance posture with specialized dashboards.
(2)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources