Encrypted Traffic Classification
Unlock encrypted traffic to gain full network visibility and optimize QoE
Many of today’s Internet services and data applications encrypt traffic to guarantee user security and prevent carriers from identifying and controlling the data flow. For example, P2P and VoIP services such as BitTorrent and Skype obfuscate their protocol structure to avoid detection, traffic shaping, or metering. Likewise, many OTT applications use SSL, or other techniques, to encrypt communications and hide user information.
While encryption is reassuring for privacy purposes, it compromises the service provider’s visibility to manage traffic and provide comprehensive security.
Allot’s Encrypted Traffic Classification solution empowers you to overcome these challenges. It analyzes and classifies all traffic, irrespective of encryption, so you can manage it. As a result, you can improve your network’s efficiency, make it more secure, and ensure your users enjoy the Quality of Experience (QoE) they expect.
Traffic you can see is traffic you can control
Part of the Allot SmartTraffic QoE suite, our Encrypted Traffic Classification solution is based on Allot’s Dynamic Actionable Recognition Technology (DART). It employs multiple inspection methods to identify traffic according to Layer-7 application, user, device, access, video and contextual attributes.
By adopting Allot’s combination of inspection methods, you can achieve highly granular and accurate recognition, even at maximum speeds and peak loads.
You’ll be able to:
- Quantify and understand network usage
- Optimize network efficiency
- Assure high-quality service delivery and experience
- Create value-add services packages and charge for their use.
More about DART
DART proactively learns and adapts to evolving encryption tactics using many methods, including:
- Pattern and numerical property analysis of packet contents
- Heuristic analysis of behavior statistics from inspected transactions
- Learning peer system behavior to identify P2P seeders (multiple transmission of files) and popular peers.
- Classification of Port, IP address, or range of IP addresses
- Machine-learning based on statistical distribution patterns for thousands of traffic attributes.
- Automatic IP discovery through analysis of service hosts and subscriber records.
Allot’s patented Predictive DPI (PDPI) technology enables the classification engine to learn from the patterns and behavior of traffic that it recognizes with 98% accuracy and compares them with encrypted flows to improve identification.
The latest protocols supported by Allot, enabling full visibility and control over your network.
With the power to classify every packet, our traffic management toolkit can help you provide more high-quality services to more subscribers while keeping costs down.
How Allot works with leading service providers to see, control and protect the data in their networks, to maximize efficiency and security.
Help Service Providers optimize their networks and keep pace with the demand for differentiated and high quality services.
A central vantage point for network-wide configuration, policy management, and hitless updates to the traffic classification engine inside every Allot multiservice platform.
Overcome congestion challenges across your network by providing enough capacity to meet bandwidth demand while avoiding unnecessary infrastructure expansion
Regulate traffic flow automatically, in line with your network and service policies, to maximize QoE and maintain efficiency