My corporation runs suricata, bro, laikaboss, pcap pulls on 400 servers worldwide. These are CentOS 7.4 systems running mostly on Dells but a few HPs. These apps sample incoming data to look for trojans, malware, and so forth.

We are looking at a Gigamon solution that sews up all these apps into one platform and provides support, which we don't have with the open source system now in place.

Was looking for opinions on Gigamon. Has anyone used it? What do you like about it? What do you hate about it? Would you recommend a better product?

Any thoughts welcome, and thanks!