The proliferation in the use of social media, gaming, and file sharing applications, fueled by a meteoric rise in mobile devices, have created a tenuous situation for network administrators, who must constantly be on the alert for network misuse, intellectual property theft, and other abuses. Improper use of the network can cause bandwidth demands to escalate and lead to lower productivity not just for the abusers who are spending their time inappropriately but for all network users whose traffic is affected. On the other hand, customer’s business is constantly exposed to security threats like SQL injection, XSS, DDoS attacks, etc. A dedicated security solution that can stop all types of network malicious attacks including attacks that exploit custom vulnerabilities is necessary.
Broadwebs’ Multi-Functional DPI Suite (BMDS) features a unique one-pass Deep Packet Inspection technology, providing true visibility to the network traffic. Rather than using a separate set of scanning engines for each DPI feature, BMDS comprises a uniform DPI engine and signature databases to identify classify and detect a wide range of network applications and threats while dramatically increasing the throughput and reducing latency. Broadweb provides the true visibility that enables developers of firewalls, unified threat management (UTM) and other network security and management solutions to apply and enforce application admission, control and performance policies for their enterprise and service provider customers.
DPI, as a technology, has a variety of roles in telecom infrastructures and can facilitate with varying modes of traffic analysis, for example:
1. Application-aware Congestion Management;
2. Tiered Services and Pricing;
3. Quality of Service Guarantees for Provider Services
In tradition, DPI software does not scale well as performance increases, however, Broadweb’s Multi-Functional DPI Suite (BMDS) is optimized for symmetric multiprocessing (SMP) processors, and provides near linear scalability as core density increases. It can easily achieve multi-10’s of Gbps throughput with off-the-shelf x86 processors. BMDS is also proved to be working with popular fast-plane/data-plane architecture to make the DPI effortless.
BMDS is derived from Broadweb award-winning NetKeeper IPS system (Certified by NSS Labs and ICSA Labs), which detects and mitigates 7000+ threats. It also has a comprehensive library of protocol and application signatures, more than 1800 applications’ behaviors, which offers exceptionally high recognition rates and thorough visibility for applications.