Deep packet inspection solution ipoque


The key technology for future networks

Deep packet inspection (DPI) functionalities

Only advanced DPI technology meets future network challenges

In recent years, deep packet inspection (DPI) has evolved from a basic signature-based security mechanism used for identifying threats through pattern matching to an advanced behavioral and statistical analysis tool delivering full insights into IP-based network traffic. DPI software has become a powerful tool to meet new network challenges, playing a central role in today’s internet and network infrastructure. With emerging technologies, 5G, IoT/ IIoT and widespread virtualization on the network and application level, DPI becomes even more important to ensure efficient network operation and the highest security.

Where and why is DPI technology used?

DPI can look for protocol non-compliance, spam, viruses, intrusions, or other defined criteria to decide whether the packet may pass or needs to be routed to a different destination. DPI technology can be integrated into firewalls, routers, SD-WAN solutions, IoT gateways and many other devices to enhance security and improve network management.

To meet future service demands, carriers and enterprises are not only enhancing their network infrastructure for greater speed and quality of service (QoS), but also looking for ways to manage their data flows more intelligently. The key to maintaining integrity, ensuring security and optimizing the efficiency of a multi-Gbps network is a high-performant, efficient and accurate deep packet inspection software such as R&S®PACE 2 that delivers full visibility into IP-based network traffic in real time.

Encrypted traffic intelligence

As most of the internet traffic is now encrypted, a reliable DPI software needs a tool kit of advanced techniques to classify traffic and, for example, determine if an encrypted WhatsApp session is a voice call, a text message, a sent video or the like, with very high accuracy. This requires traditional DPI techniques such as pattern matching to be supplemented by heuristic and statistical approaches as well as machine learning and complex algorithms developed by a team of engineers. These techniques can analyze many flow dimensions, the flow duration, the transfer size, group attributes to parse types of traffic, and identify protocols. It’s also possible to indicate the quality of experience (QoE) of videos using buffer counts, buffer stalls, pauses, bitrate changes and so on.

In the age of ever-increasing network traffic and fast-evolving advanced threats, deep packet inspection is a critical tool for advanced network management and IT security. Learn more about the best-performing DPI engine R&S®PACE 2 to achieve reliable IP traffic visibility despite encryption and frequent application changes.

OEM IP network analytics

Designed to create value

Application awareness is key to disclose performance bottlenecks and provide data usage insights in order to improve network performance, security and to optimize policies. ipoque, a Rohde & Schwarz company, has more than 15 years of experience in IP network analytics helping network equipment and software vendors to understand their network data by transforming IP data into actionable intelligence. Designed to manage large amounts of data, our DPI software R&S®PACE 2 keeps up with the future developments of network products and solutions.

The graphic shows in which areas you can find our DPI technology. To name a few, DPI helps to reroute mission-critical enterprise applications like CRM tools, without any loss of performance, it helps to achieve a holistic view of networks to stay ahead of threats and embedding DPI software in wireless access points helps network providers to improve the quality of experience for their customers.

Deep packet inspection use cases

What is your business and how can ipoque's DPI engine make it better?

Use case deep packet inspection - SIEM
Use Case

Threat intelligence/ SIEM

Threat intelligence solutions like SIEMs are widely deployed by security analysts to protect sensitive network assets from the most advanced cyber threats. With about 7 billion internet-connected devices (according to data from IoT Analytics) next-generation SIEMs need to tackle the latest security breaches with advanced analytics. The challenge is in managing SIEM solutions to eliminate false positives and sort through the massive amount of data they supply quickly and efficiently. DPI-powered protocol and application classification by R&S®PACE 2 adds valuable real-time information as SIEM vendors can obtain real-time visibility into both plain and encrypted network traffic, as well as information on traffic KPIs.

More information
Protocol and application classification with deep packet inspection (DPI)

Gain real-time traffic visibility with our leading-edge DPI and IP classification technology

Related material