Improve Productivity andSecure Your Operational
Technology Assets With
Gigamon and Nozomi

Overview

The distinction between information technology (IT)and operational technology (OT) is becoming blurredwith industrial control and SCADA systems being
connected to internal IT networks and the larger
internet. Moreover, IoT devices are growing in vast
numbers throughout many organizations. OT networks
now include many IT machines and IoT devices likecameras, tablets, phones, badge-based access control
units, and barcode readers. While pure-play devices
like programable logic controllers (PLCs) are very
different from IT, the different networks are converging
very quickly. Though this convergence may increase
efficiency, the interconnections increase the attack
surface area of vital OT and IoT systems.
To better manage the risk of IT with OT/IoT integration,
you need the right tools to access the relevant traffic
to gain complete visibility to track and monitor assets,
vulnerabilities, operational controls, and any abnormalchanges. IT/IoT/OT tools need to work together to lockdown your network, and intelligent network filteringand shaping capabilities are necessary to ensure
network packets are delivered to the right place at theright time in order to truly protect your OT assets.

© 2023 Gigamon. All rights reserved.

The Gigamon + Nozomi Networks Joint Solution
Together, the Gigamon Deep Observability Pipeline
and Nozomi Networks provide real-time network
visualization and up-to-the-minute threat detection foryour OT assets, where:• Guardian™ protects industrial control networks fromcyberattacks and operational disruption throughpassive network traffic analysis.

• Smart Polling™ uses precise, low-volume active
polling to provide a full OT asset inventory andvulnerability assessment.

• The Central Management Console™ aggregates datafor hundreds of distributed industrial installations,providing consolidated and remote access to your ICS
data from Guardian appliances deployed in the field.

• A sset Intelligence™ continuously updates Guardian
sensors with rich OT and IoT device data so you canidentify and respond to the most important security
alerts faster.

1

JOINT SOLUTION BRIEF | NOZOMI NETWORKS• Masking for data privacy compliance

The Gigamon Deep Observability Pipeline combineswith Nozomi Networks tools to offer comprehensiveand integrated visibility across IT and OT assets. The
Gigamon Deep Observability Pipeline accesses traffic
from across an infrastructure (physical, virtual, andcloud), aggregates this traffic into a single stream ofintelligence, and delivers the data to an organization’s
entire tool stack - including Guardian. Teams can also
leverage Gigamon functionalities like de-duplicationand decryption to transform the traffic before it
reaches the Nozomi security tools to analyze.

• Optimization and filtering of network traffic sent
to Guardian and other tools by sitting between theproduction network (physical, virtual, cloud) and theNozomi Networks platform• Brokering of relevant traffic to Nozomi Networks
tools that require network traffic to perform analytics,monitoring, and reporting• Cost savings and improved ROI realized throughcentralized Gigamon capablities like de-duplication,
SSL/TLS decryption, flow or packet slicing, Layer 7
application filtering, and more

The Gigamon Deep Observability Pipeline also provides:• Load balancing to spread the volume of traffic acrossmultiple instances of Nozomi Networks• Header stripping that makes Nozomi Networks toolsmore efficient

Vantage

Mirrored Trafﬁc
Physical, Virtualand Cloud

Process Network

TrafﬁcFiltering
VirtualPhysicalTrafﬁcAggregation

ManagementTLS
Decryption

HMIServersEdge

Guardian
Data Masking

Load-Balancing

Cloud

Container

Flow
Mapping

HeaderStrippingBelt

Mirrored Trafﬁc

ReaderPrinter
Physical/ Virtual/Cloud© 2023 Gigamon. All rights reserved.

Control Network

DC Network2

JOINT SOLUTION BRIEF | NOZOMI NETWORKS

Joint Solution Benefits• Gigamon aggregates data from across yourinfrastructure to provide complete visibility• Nozomi Networks catalogs operational
technology assets across your network, analyzes
its vulnerabilities, and baselines normal state tominimize downtime• Nozomi Networks provides anomaly detection ofoperational and security events with its unique AI andmachine-learning technology• The Gigamon Deep Observability Pipeline accesses
traffic and transforms packets and flows to optimize
Nozomi Networks’ capabilities

About Gigamon
Gigamon offers a deep observability pipeline thatharnesses actionable network-level intelligenceto amplify the power of observability tools. Thispowerful combination enables IT organizations toassure security and compliance governance, speed
root-cause analysis of performance bottlenecks, andlower operational overhead associated with managing
hybrid and multi-cloud IT infrastructures. The result:modern enterprises realize the full transformational
promise of the cloud. Gigamon serves more than 4,000
customers worldwide, including over 80 percent of
Fortune 100 enterprises, nine of the 10 largest mobile
network providers, and hundreds of governments andeducational organizations worldwide.
To learn more, please visit gigamon.com.

For more information on Gigamon and Nozomi Networks, please visit
gigamon.com | nozominetworks.com

Worldwide Headquarters
3300 Olcott Street, Santa Clara, CA 95054 USA+1 (408) 831-4000 | gigamon.com© 2021-2023 Gigamon. All rights reserved. Gigamon and the Gigamon logos are trademarks of Gigamon in the United States and/or other countries.
Gigamon trademarks can be found at gigamon.com/legal-trademarks. All other trademarks are the trademarks of their respective owners. Gigamon
reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
04.23_03© 2023 Gigamon. All rights reserved.

3