Gigamon boosts GigaVUE platform for quantum-safe encryption

Gigamon has introduced new capabilities to its GigaVUE 6.12 platform, providing enterprises with tools to address cryptographic vulnerabilities associated with the rise of quantum computing. The latest enhancements focus on supporting post-quantum cryptography (PQC), a response to increasing concern over the security of existing encryption methods as quantum technology advances.

Quantum concerns

Current industry analysis suggests that traditional public key encryption could become vulnerable as soon as 2030. Research by Gigamon found that 73 percent of surveyed Security and IT leaders are preparing to implement PQC in their infrastructures. This preparation is driven by the imminent risk posed by quantum computers' ability to break existing cryptographic standards.

Chaim Mazal, Chief AI and Security Officer at Gigamon, commented on the urgency of these changes.

"Quantum readiness isn't a future concern. It's a critical imperative for all security teams today. With the advances we've made, I'm optimistic about the safeguards we're building to future-proof hybrid cloud infrastructure and its data. The Gigamon Deep Observability Pipeline delivers the encryption visibility and network intelligence organizations require today, while building a resilient foundation for tomorrow's quantum-safe future," said Mazal.

Deep observability

The GigaVUE 6.12 release expands the Deep Observability Pipeline, enabling organisations to identify where cryptography is used and pinpoint weak cipher suites or non-compliant encryption methods in encrypted traffic. By doing so, businesses can create an accurate cryptographic inventory, validate the implementation of PQC, and monitor the use of classic and quantum-safe encryption standards.

The adoption of Transport Layer Security (TLS) 1.3 is another focus, as it currently stands as the only widely adopted protocol natively supporting PQC. Gigamon's platform offers native support for TLS 1.3 and allows users to choose between decrypting traffic for scrutiny or leveraging its Precryption technology to achieve plaintext visibility without the need for invasive "break and inspect" techniques. Precryption enables access to unencrypted data within virtual, cloud, and container environments, streamlining compliance and security operations.

Harvest now threats

A growing method known as "harvest now, decrypt later" is prompting additional urgency. This approach involves the collection of encrypted data today by threat actors, with plans to decrypt it in the future when quantum computing capabilities catch up. Gartner has described this as making the transition to quantum-safe cryptography a "global imperative," noting that both governmental and regulatory forces are now mandating organisations to begin the transition to PQC to protect long-term data security.

Metadata intelligence

With Application Metadata Intelligence (AMI), Gigamon adds context-driven visibility to encrypted traffic. This function now accommodates PQC and aids in identifying and curbing insecure cryptographic practices. It gives Security and IT teams the means to detect vulnerabilities and take action against potential data exfiltration before PQC standards are fully adopted and enforced.

Integration and transition

Gigamon's platform is designed to export flow records and metadata to existing security information and event management (SIEM) systems, vulnerability trackers, and compliance tools such as Splunk, QRadar, and Elastic. This integration helps organisations build dashboards and alerts to address insecure cryptographic protocols, supporting both internal and external compliance requirements.

Additional tools in the new release enable businesses to discover and retire insecure TLS and SSL versions, identify gaps in the cryptographic posture, and accelerate the transition to PQC. These steps are crucial for meeting regulatory expectations at a time when industry and governmental guidelines are converging toward quantum-safe standards.

"The Gigamon Deep Observability Pipeline delivers the encryption visibility and network intelligence organizations require today, while building a resilient foundation for tomorrow's quantum-safe future," said Mazal.