1. Home
  2. >
  3. Products
  4. >
  5. DPI Engine

DPI ENGINE

DETAILED TRAFFIC VISIBILITY UP TO LAYER 7

Qosmos ixEngine® is an advanced, DPI-based classification engine that recognizes over 3500 protocols, more than any other Deep Packet Inspection (DPI) library on the market.

Delivered as a Software Development Kit (SDK), it is composed of software libraries, modules and tools that are easily integrated into new or existing solutions. Developers benefit from market-leading IP flow parsing technology to bring detailed traffic visibility to network solutions up to Layer 7. Integration of Qosmos ixEngine as a software component removes the need to develop in-house protocol recognition capabilities, simplifying product development and accelerating delivery.

Identification of over 3500 protocols and applications

Learn more

Classification of encrypted and evasive traffic

Optimized to analyze traffic in real time at 10, 40, 100 Gbps

DECODING ENGINE

  • Identification of protocols and applications behind each IP flow using a combination of advanced techniques including stateful inspection, behavioral and statistical analysis, heuristics, machine learning, etc.
  • Extraction of metadata and metrics related to applications, services, data, users, devices, and traffic flows

PROTOCOL PLUGIN BUNDLE AND UPDATES

  • Qosmos’ protocol plugin bundle includes thousands of protocol and application plugins to classify flows and extract metadata. Learn more about our protocol expertise
  • Qosmos Labs continuously monitor protocols and applications updating protocol plugins to ensure they are always up-to-date

SPECIAL FEATURES

First Packet Advantage

  • Enables outstanding SD-WAN and SASE performance through a unique first packet processing capability
  • Features an innovative, multi-tier cache system that includes hundreds of millions of continuously updated, DPI-validated IP addresses for unrivaled accuracy

Evasive Traffic Pack

  • Supports advanced anomaly and threat detection with a dedicated suite of evasive traffic classification plugins
  • Coverage includes evasive techniques like complex tunneling, file spoofing, domain fronting, and the use of covert communication channels, VPNs, anonymizers and more

Encryption Guard

  • Protects data privacy while preserving the network traffic visibility required for network orchestration, performance management and cybersecurity
  • Methodologies include statistical and behavioral analysis, machine learning, DNS-based classification and the use of the First Packet Advantage cache
 
 

OPTIONAL MODULES

CUSTOM SIGNATURE MODULE

  • Allows users to develop custom protocol plugins that are integrated in the Qosmos ixEngine framework at run time

DEEP FILE INSPECTION MODULE

  • Identifies exchanges of suspicious files (i.e. incorrect / fake types or encrypted)
  • Performs basic checks for malware detection and Data Leak Prevention

RULE ENGINE MODULE

  • Executes customer-defined rules at run-time on output from classification and metadata extraction
  • APIs configure rules and load them into rule engine at production stage; rules are expressed in JSON format

LIBDEVICE 2.0 MODULE (Learn more about LibDevice 2.0)

  • Delivers precise, detailed profiles of connected devices, with fingerprints for 50K+ devices across several hundreds of consumer, enterprise, and industrial device categories

  • Closes device visibility gaps in existing solutions and enables product innovation through device awareness

Qosmos ixEngine, the most widely deployed DPI & traffic classification engine inside cybersecurity, networking and telecom solutions

QOSMOS IXENGINE

Boost your solutions with detailed, real-time traffic visibility
Qosmos ixEngine: Next-Generation Deep Packet Inspection (DPI) for Maximum Traffic Visibility
Deep Packet Inspection Characterization (a whitepaper by Intel & Enea Qosmos)
Video
Demo of Qosmos DPI Engine for Cybersecurity Applications
Video
Demo of Qosmos DPI Engine for Network & Telecom Applications