The Gigamon Data Connector exports network-derived intelligence, generated by Application Metadata Intelligence (AMI), into Microsoft Sentinel for analysis. AMI produces rich contextual information about your applications and protocols. Using deep packet inspection, AMI extracts and summarizes data from 7,000+ attributes spanning over 3,500 apps. AMI empowers Microsoft Sentinel to rapidly spot suspicious activities and performance issues.

Application Metadata Intelligence (AMI) helps you monitor and manage complex digital applications for your digital transformation initiatives. Benefits include:

Rich Actionable Insights
Extract close to 7,000 app-related metadata elements from deep packet inspection for improved performance and faster troubleshooting.

Boost Security Posture
Discover suspicious network activity, weak ciphers, expired TLS certificates, DNS tunneling, and rogue user activity such as crypto mining.

Reduce SIEM Cost
Decrease SIEM NetFlow ingestion by sending select AMI attributes, instead of all flow records.