Home
>
Products
>
DPI Engine

DPI ENGINE

DETAILED TRAFFIC VISIBILITY UP TO LAYER 7

Qosmos ixEngine® is an advanced, DPI-based classification engine that recognizes over 3700 protocols, more than any other Deep Packet Inspection (DPI) engine on the market.

Delivered as a Software Development Kit (SDK), it is composed of software libraries, modules and tools that are easily integrated into new or existing solutions. Developers benefit from market-leading IP flow parsing technology to bring detailed traffic visibility to network solutions up to Layer 7. Integration of Qosmos ixEngine as a software component removes the need to develop in-house protocol recognition capabilities, simplifying product development and accelerating delivery.

Identification of over 3700 protocols and applications

Learn more

Classification of encrypted and evasive traffic

Unique first packet processing capability boosting application recognition and accuracy

DECODING ENGINE

Identification of protocols and applications behind each IP flow using a combination of advanced techniques including stateful inspection, behavioral and statistical analysis, heuristics, machine learning, etc.
Extraction of metadata and metrics related to applications, services, data, users, devices, and traffic flows

PROTOCOL PLUGIN BUNDLE AND UPDATES

Qosmos’ protocol plugin bundle includes thousands of protocol and application plugins to classify flows and extract metadata. Learn more about our protocol expertise
Our labs continuously monitor protocols and applications updating protocol plugins to ensure they are always up-to-date

SPECIAL FEATURES

First Packet Advantage

Enables outstanding SD-WAN and SASE performance through a unique first packet processing capability
Features an innovative, multi-tier cache system that includes hundreds of millions of continuously updated, DPI-validated IP addresses for unrivaled accuracy

Evasive Traffic Pack

Supports advanced anomaly and threat detection, including potential MITM attacks, with a dedicated suite of evasive traffic classification plugins
Coverage includes evasive techniques like complex tunneling, file spoofing, domain fronting, and the use of covert communication channels, VPNs, anonymizers and more

Encryption Guard

Protects data privacy while preserving the network traffic visibility required for network orchestration, performance management and cybersecurity
Methodologies include statistical and behavioral analysis, machine learning, DNS-based classification and the use of the First Packet Advantage cache

OPTIONAL MODULES

CUSTOM SIGNATURE MODULE

Allows users to develop custom protocol plugins that are integrated in the Qosmos ixEngine framework at run time

DEEP FILE INSPECTION MODULE

Identifies exchanges of suspicious files (i.e. incorrect / fake types or encrypted)
Performs basic checks for malware detection and Data Leak Prevention

RULE ENGINE MODULE

Executes customer-defined rules at run-time on output from classification and metadata extraction
APIs configure rules and load them into rule engine at production stage; rules are expressed in JSON format

LIBDEVICE 2.0 MODULE (Learn more about LibDevice 2.0)

Delivers precise, detailed profiles of connected devices, with fingerprints for 50K+ devices across several hundreds of consumer, enterprise, and industrial device categories
Closes device visibility gaps in existing solutions and enables product innovation through device awareness