Application Services Gateway
Multiple Applications, Multiple Services – The Ideal Deep Packet Inspection (DPI) Network System
The Bivio Application Services Gateway (ASG) is the first DPI-based multi-application service platform and represents the next generation service provider subscriber gateway device. It enables service providers and other customers to leverage DPI capabilities to implement and deploy DPI-based applications and services.
Unlike traditional service platforms that rely on multiple disparate devices and applications, the ASG provides an integrated software suite of applications and services, bound together by a powerful DPI classification engine. The result is an unparalleled ability to deploy powerful DPI-based multi-application services including traffic management, content-based filtering, processing and billing, managed security, VoIP monitoring, service protection, and others.
Enabling Personalized Internet Services for Fixed & Wireless Networks
The new Web 2.0 paradigm is having an enormous impact on the way people and businesses communicate. Widespread adoption of rich Internet applications and services such as Instant Messaging (IM), Peer-to-Peer (P2P), VoIP/Internet Telephony, Virtual Communities, Online Gaming and Internet TV challenge carriers and broadband access/service providers to offer new service models that increase average revenue per user (ARPU) while protecting existing revenue – without further increasing infrastructure spending.
As web application usage accelerates, carriers and service providers must deliver a “personalized” Internet experience to subscribers that can facilitate new revenue generation opportunities, increase customer satisfaction and prevent being confined to the role of bare “access pipe” suppliers for third-party services.
The Bivio ASG enables carriers, service providers, and government agencies to provide a personalized Internet experience to their subscribers, while complying with fair Internet-usage policies and protecting critical network infrastructure.
Improving Service & Protection of Carrier’s Service Platforms while Reducing CAPEX
The Bivio ASG may also be deployed as the ideal complement to a carrier’s VoIP or DNS service platforms to ensure security, robustness and scalability of this critical network infrastructure. Operating as a pure transparent device, the ASG requires no need for re-engineering of the existing network topology and guarantees regular service delivery even in the presence of extreme traffic conditions.
Service & Application Deployments
- Internet Content Filtering for Parental Control
- Internet Content and Application Filtering for Business Productivity and Policy Compliance
- VoIP and Instant Messaging Detection and Handling
- P2P Traffic Control and Enforcement
- VoIP Service Platform Protection
- DNS Caching/Overriding & Anti-Pharming Protection
Bivio ASG Features
The Bivio ASG is a carrier grade system designed to allow service providers and broadband carriers to create, manage and enforce usage policies for a variety of Internet services on a per-subscriber basis. By combining networking functionality with per-flow service processing, the ASG classifies, identifies and controls IP traffic and enables the carrier to granularly apply flexible user profiles on a per-flow, per-subscriber basis, thus allowing full compliance with its business and regulatory goals.
Similar to other service border gateway systems (such as Session Border Controllers, firewalls and Broadband Access Servers) the ASG is positioned on the edge portion of a carrier network, physically located at local, aggregation or Internet gateway PoPs, and often deployed at carrier co-location sites. As a unified solution for fixed and mobile broadband data, the ASG operates inline to process all relevant subscriber traffic and enforce the required network traffic policy while avoiding the need to cluster together multiple appliances to achieve the target performance. In additionn, the standalone system design includes auto-discovery of user-authentication protocols, eliminating the need to make external calls to provisioning servers, thereby greatly simplifying the deployment and management of the system.
The Bivio ASG is specifically designed to handle native Web 2.0 Internet overlay services, including IM, VoIP and P2P applications. In fact, new services such as P2P, VoIP, chat, presence, video calls and Internet Broadcasting are characterized by sophisticated traffic obfuscation layers that render traditional network analysis solutions largely ineffective.
Features
- Self-learning transparent in-line subscriber identification and profiling
- Dynamic protocol/application definitions update with no service disruption of software release update required
- CLI, SNMP, XML management interfaces
- Local RADIUS administrator authentication and configuration
- Carrier-class availability, serviceability and fault tolerance
- Configurable standards-based logging formats
- Self-definable reports
- Unparalleled system scalability from sub-Gbps to beyond 10 Gbps throughput
FlowInspect™ DPI Engine
Carriers today require a Service-Aware Network Layer Infrastructure to create new network services with per-subscriber granularity for fixed and wireless broadband networks. To meet this complex requirement, the Bivio ASG incorporates the innovative FlowInspect™ DPI Engine, encompassing multilayer, multi-stage Deep Packet Inspection (DPI) and processing capabilities, combined with effective Web 2.0 IP classification and intelligent multi-application dispatching.
The FlowInspect DPI Engine delivers the most advanced implementation of DPI technology as it incorporates functionality typically scattered in discrete network elements such as L4 routers, L7 firewalls, DPI probes and Policy Management systems. This approach eliminates the need to deploy multiple disparate appliances, effectively improving reliability, scalability and financial return on investment.
Scalable and fault-resilient, the FlowInspect DPI Engine differs from traditional, mono-dimensional DPI traffic probes. The DPI Engine enables advanced DPI processing of multiple concurrent applications on the ASG. Multi-level traffic inspection techniques, including multi-session/multi-stage stateful flow marking and pattern identification, are combined with patent-pending heuristic traffic mapping to control/block network traffic. The DPI Engine can accurately identify complex traffic based on auto-discovery of a given Internet application topology (such as in the case of most P2P services). This unique innovation is enabled by flow-state technology, which manages the ‘state' of each IP flow and performs real-time correlation between the different flows detected and passing through the system at any given time.
Bivio ASG Service Modules
The ability of the Bivio ASG to inspect, identify and enforce network traffic policy on a per-flow and per-subscriber basis is the key to a number of deployment scenarios focused on new service revenue generation for service providers. The cornerstone is the ability of the ASG to classify each IP flow and dispatch it to the appropriate Service Module, according to the carrier configuration and the subscriber-specific profile. This approach enables a number of key service scenarios that carriers can easily implement by leveraging the platform’s pre-integrated set of ASG Service Modules.
| Web Content Control | Control, filter and manipulate Internet content based on personalized subscriber profiles. This network-based URL filtering solution allows service providers to offer parents, institutions, IT professionals and executives a valuable service to selectively manage and control, in a personalized fashion, underage user activity, employees’ web productivity, and more. The ASGs mobile-ready and natively supports all mobile description languages and dynamic identification of subscribers with "Follow-Me" policy enforcement. Bivio partners with industry-leading URL categorization and content rating database providers to deliver the most comprehensive and scalable Web content control solution on the market. |
| Traffic Enforcement | Monitor, control and block Internet, P2P, IPTV and VoIP applications based on personalized subscriber profiles. The ASG provides a highly programmable Traffic Enforcement suite so that carriers can integrate broadband transport with personalized context-based service delivery. Carriers can now identify and manage traffic flows based on applications, protocols and subscribers. This enables them to charge for the usage of their infrastructure or to block unauthorized traffic flows from traversing their network. The ASG traffic enforcement features provide service providers with a rich set of tools in order to predefine subscriber-based traffic services which will be either billed or blocked. |
| Future Services | Future ASG Service Modules create new revenue generation opportunities with subscriber-based services. Service providers continually seek new and advanced revenue generating services to drive ARPU and reduce customer churn. Multi-media subscription services including IPTV, content insertion and wireless on-demand interactive gaming exemplify new and emerging carrier services. The Bivio ASG architecture enables rapid development and deployment of these and other policy-centric advanced services. |
-
“If you have a number of security applications that can concentrate on a single platform, then this is the product for you”
Network Magazine
-
“Every once in a while a disruptive technology emerges that has the potential to change a business sector or to create a new one”
Financial Times