SD-WAN solutions need a detailed understanding of network traffic in order to be effective in leveraging multiple network paths for different applications. Only advanced Deep Packet Inspection (DPI) can provide a high enough level of application visibility and traffic classification to meet all the needs of QoS management, security functions such as firewalling, and traffic routing optimization.
Qosmos ixEngine® is an advanced, DPI-based classification and metadata engine that recognizes over 3600 protocols. It performs IP classification and extracts metadata up to Layer 7, based on real-time application and user information. Developed specifically for integration into third-party applications, such as SD-WAN, it provides granular information to be used as input for higher-level functions such as firewalling, QoS based-routing and WAN optimization.
Qosmos ixEngine provides application awareness to improve SD-WAN routing and security functions
Qosmos ixEngine also offers a unique first packet processing capability for outstanding SD-WAN performance. This capability, First Packet Advantage, features an innovative, multi-tier cache system that includes hundreds of millions of continuously updated, DPI-validated IP addresses and application matches. As a result, it brings unrivaled accuracy and granularity to the task if identifying traffic from the first packet in a flow.
This enables SD-WAN products to instantaneously and precisely execute application-specific rules, such as those related to unique bandwidth, latency, or security requirements. What’s more, the data generated includes security-related information that enables SD-WAN vendors to enhance their offer with new security rules, to develop firewalls and other key security components as part of a Secure SD-WAN solution, or to evolve their offer into a complete, cloud-based SASE solution.
Moreover, First Packet Advantage offers SD-WAN vendors a further competitive edge through its ability to accurately identify protocols, applications and services in encrypted streams. This will provide vendors with an important traffic visibility safeguard as encryption usage and standards evolve.
