Gigamon introduces new integrations with Splunk and Phantom, bringing its Defender Lifecycle Model to life

Gigamon Inc., the provider in visibility solutions, announced new integrations with both Splunk and Phantom aimed at accelerating incident response, reducing the time to threat detection and automating threat mitigation. The Gigamon IPFIX Metadata Application for Splunk, the Gigamon Adaptive Response Application for Splunk and the Gigamon App for Phantom utilise industry standards and open APIs for seamless integration across product offerings. The solutions empower SecOps and DevOps teams to take immediate action and effectively combat rapidly evolving and persistent cybersecurity threats.

These three integrations bring to life the Defender Lifecycle Model, a new approach to security that addresses the increasing speed, volume and polymorphic nature of cyber threats. The model is based on a foundational layer of pervasive visibility across the four key pillars of prevention, detection, prediction and containment that are essential in a modern cybersecurity infrastructure.

The model leverages the GigaSECURE® Security Delivery Platform and enables the integration of machine learning, artificial intelligence (AI) and security workflow automation to shift control away from the attacker and back to the defender.

The industry notes business demand for cybersecurity solutions. According to Gartner, “By 2020, 60% of enterprise information security budgets will be allocated for rapid detection and response approaches, up from less than 20% in 2015.”

Ananda Rajagopal

“Our new Splunk and Phantom solutions help customers better manage the threat environment by streamling the collection, analysis and reaction to suspicious data using the GigaSECURE® Security Delivery Platform across their cybersecurity infrastructure. This will help customers expand their use case options, and accelerate both their deployment timelines and the time-to-value,” said Ananda Rajagopal, vice president of products at Gigamon.

“The integrated solutions speed threat identification and mitigation by automating what is often a time-consuming and complex manual process.”

Splunk integration capabilities overview

For SecOps teams who are challenged with managing an overwhelming amount of data, incidents and potential threats, the new Splunk ® integrations from Gigamon deliver the visibility and control required to quickly and effectively identify critical incidents and threats and automatically mitigate them.

The Gigamon IPFIX Metadata Application for Splunk allows Splunk customers to ingest network metadata generated by the GigaSECURE Security Delivery Platform. The Gigamon Adaptive Response Application for Splunk enables security operations centre (SOC) teams to take automated actions on the GigaSECURE platform in response to threats detected in Splunk ES.

The solutions can be used for a variety of use cases including:

  • The isolation of an infected host trying to resolve high-entropy domain names or block rogue DNS servers.
  • The detection and mitigation of malware attacks such as the recent WannaCry ransomware cyberattack.
  • The redirection of traffic to a recorder or a specific security tool chain for advanced analysis can be performed when usual network traffic activity is seen.

“Increasingly sophisticated threats cannot be eliminated with any single technology. There is no silver bullet for security,” said Haiyan Song, senior vice president and general manager of Security Markets at Splunk. “We created the Adaptive Response Initiative to help organisations more efficiently and flexibly combat advanced attacks with their existing security architectures. Members like Gigamon are key to the success of Adaptive Response. We look forward to working with them as the world embraces an analytics-driven approach to security.”

Phantom integration capabilities overview

The Gigamon App for Phantom provides SecOps teams with automated and orchestrated security operations and case management. The application utilises REST APIs provided by the GigaSECURE Security Delivery Platform and enables Phantom users to trigger workflows or remediation actions on the GigaSECURE Security Delivery Platform in response to specific events.

Key benefits of the Gigamon App for Phantom include automating common security operations tasks through predefined playbooks, and orchestrating network threat detection and mitigation to reduce mean time to resolution.

“Gigamon provides an innovative, extensible, pervasive platform for visibility that integrates with Phantom to orchestrate and automate critical security operations tasks,” says Oliver Friedrichs, CEO and founder, Phantom. “Our integrated solutions allow SecOps teams to work smarter, respond faster and strengthen their network defense postures.”

Comment on this article below or via Twitter: @IoTNow_OR @jcIoTnow

RECENT ARTICLES

SiTime expands addressable market with its new precision timing solution for autonomous vehicles

Posted on: September 30, 2022

Santa Clara, United States. 27 September, 2022 – SiTime Corporation, a provider in precision timing, introduced a new automotive oscillator family, based on SiTime’s advanced MEMS technology. The new differential oscillators are 10x more resilient and ensure reliable operation of ADAS across extreme road conditions and temperatures. The launch of the new automotive oscillator, AEC-Q100 SiT9396/7,

Read more

Semtech’s LoRa devices featured in Kiwi Technology gas metering solution

Posted on: September 30, 2022

Camarillo, United States. 29 September, 2022 – Semtech Corporation, a global supplier of high performance analog and mixed-signal semiconductors and advanced algorithms, announced that Kiwi Technology, an advanced internet of things (IoT) turn-key solutions and data analytics provider, is using Semtech’s LoRa devices for its new third party class B network control unit (NCU) that connects gas meters

Read more
FEATURED IoT STORIES

9 IoT applications that will change everything

Posted on: September 1, 2021

Whether you are a future-minded CEO, tech-driven CEO or IT leader, you’ve come across the term IoT before. It’s often used alongside superlatives regarding how it will revolutionize the way you work, play, and live. But is it just another buzzword, or is it the as-promised technological holy grail? The truth is that Internet of

Read more

Which IoT Platform 2021? IoT Now Enterprise Buyers’ Guide

Posted on: August 30, 2021

There are several different parts in a complete IoT solution, all of which must work together to get the result needed, write IoT Now Enterprise Buyers’ Guide – Which IoT Platform 2021? authors Robin Duke-Woolley, the CEO and Bill Ingle, a senior analyst, at Beecham Research. Figure 1 shows these parts and, although not all

Read more

CAT-M1 vs NB-IoT – examining the real differences

Posted on: June 21, 2021

As industry players look to provide the next generation of IoT connectivity, two different standards have emerged under release 13 of 3GPP – CAT-M1 and NB-IoT.

Read more

IoT and home automation: What does the future hold?

Posted on: June 10, 2020

Once a dream, home automation using iot is slowly but steadily becoming a part of daily lives around the world. In fact, it is believed that the global market for smart home automation will reach $40 billion by 2020.

Read more

5 challenges still facing the Internet of Things

Posted on: June 3, 2020

The Internet of Things (IoT) has quickly become a huge part of how people live, communicate and do business. All around the world, web-enabled devices are turning our world into a more switched-on place to live.

Read more

What is IoT?

Posted on: July 7, 2019

What is IoT Data as a new oil IoT connectivity What is IoT video So what’s IoT? The phrase ‘Internet of Things’ (IoT) is officially everywhere. It constantly shows up in my Google news feed, the weekend tech supplements are waxing lyrical about it and the volume of marketing emails I receive advertising ‘smart, connected

Read more
IoT Newsletter

Join the IoT Now online community for FREE, to receive: Exclusive offers for entry to all the IoT events that matter, round the world

Free access to a huge selection of the latest IoT analyst reports and industry whitepapers

The latest IoT news, as it breaks, to your inbox