Rohde & Schwarz showcases OEM network analytics solutions for application and subscriber awareness at RSA Conference

As a market leader in OEM deep packet inspection (DPI) software, ipoque equips network equipment vendors for both security and mobile networking solutions such as SD-WAN/SASE or CASB with real-time application and subscriber awareness to analyze, optimize and manage IP traffic and to enable the reliable and accurate identification of network threats.

A key highlight of ipoque’s showcase at the event will be its recently launched vector packet processing (VPP)-native DPI engine, R&S®vPACE. R&S®vPACE is a cloud-optimized module that is designed specifically to power virtualized and cloud-native functions such as 5G UPFs. Based on ipoque’s experience on the renowned scalar packet processing OEM DPI engine R&S®PACE 2 which boasts extensive deployments spanning over 15 years, R&S®vPACE extends ipoque’s leadership in the DPI space to cloud computing environments, with processing speeds that are three to five times faster and a highly optimized memory footprint.

Both R&S®PACE 2 and R&S®vPACE use advanced DPI techniques which combine pattern matching, statistical or behavioral analysis and heuristics to perform application and protocol classification as well as metadata extraction to detect malicious traffic and network anomalies. Leveraging ipoque’s extensive signature library that boasts weekly signature updates, R&S®PACE 2 and R&S®vPACE enable network security vendors to identify malicious traffic flows as well as protocols and applications which can pose security risks to the network and its assets.

Addressing the implication of new protocols and technologies such as TLS 1.3, TLS 1.3 0-RTT, ESNI, ECH, DNS over TLS and DNS over HTTPS on traffic visibility, ipoque will also be demonstrating its encrypted traffic intelligence (ETI) which involves the use of cutting-edge AI-based machine learning (ML), deep learning (DL) and high-dimensional data analysis. ETI utilizes advanced ML algorithms for traffic detection and DL-powered layered processing of data to extract AI features upon which such algorithms are built to identify elusive threats on the network. By incorporating ETI into R&S®PACE 2 and R&S®vPACE, ipoque delivers a future-proof solution that tackles not only current and emerging techniques in encryption, but also the use of VPN/proxies and obfuscation methods.

The event will also see ipoque exhibiting its GTP subscriber resolving module (R&S®GSRM), an innovative solution which the company launched in October last year to deliver subscriber awareness for mobile core networks. R&S®GSRM deploys the correlation of GTP user plane and control plane to deliver real-time identification of subscribers and sessions for the evolved packet core across 4G and 5G NSA networks and the packet switched core across 3G networks. “Complete visibility into subscriber sessions will take mobile network security to the next level by addressing the growing number of subscriber sessions and network threats which are becoming increasingly evasive,” said Sebastian Mueller, VP Sales at ipoque. 

Deployed primarily for intelligent load balancing in network packet brokers, R&S®GSRM will be supporting IP probes and a wide range of security functions such as intrusion prevention, content filtering and DDoS prevention in the mobile core. The use of R&S®GSRM not only protects operators’ servers and applications but also enables the delivery of endpoint security for subscriber devices via session-aware traffic filtering for threats such as malware, phishing and ransomware.  

As OEM software modules, ipoque’s suite of visibility solutions feature linear scalability and can be integrated seamlessly into physical and virtualized environments. “With the highest detection accuracy rates in the industry and the ability to deliver granular visibility, we deliver unparalleled insights into application usage and network behavior for even the most complex networks,” Mueller said.

By licensing leading-edge technology from ipoque – developed with decades of IP network experience – networking and cybersecurity solution providers can focus on their core competencies, save R&D costs and accelerate time to market.