Enea's Qosmos ixEngine is an advanced, DPI-based, classification and metadata engine that recognizes over 3100 protocols, more than any other DPI engine on the market. Delivered as a Software Development Kit (SDK), it is composed of software libraries, modules and tools that are easily integrated into new or existing solutions. Developers benefit from market-leading DPI technology to bring detailed traffic visibility to network solutions up to Layer 7. Integration of Qosmos ixEngine as a software component can be carried out in a few days and removes the need to develop in-house protocol recognition capabilities, simplifying product development and accelerating delivery. Qosmos Labs constantly monitors and updates the DPI protocol library, sending regular updates to customers that can be integrated as hot swaps into their products. In this way, firewall vendors can concentrate on their core areas of expertise while delivering maximum firewall performance at all times. BENEFITS FOR FIREWALL VENDORS: FULL APPLICATION VISIBILITY

• Identifies applications based on protocol grammar analysis, not ports
• Goes beyond traditional DPI to decode traffic inside tunneling protocols
• Identifies actions launched within an application (such as login, browse, chat, file transfer, etc.)
• Real-time extraction of communications metadata such as message senders and receivers, and names of files shared or attached in an application.
• Recognizes thousands of protocols, applications and metadata
• Allows users to develop their own protocol plugins that can be integrated in the Qosmos ixEngine framework.

Qosmos ixEngine® is an advanced, DPI-based classification engine that recognizes over 3400 protocols, more than any other Deep Packet Inspection (DPI) library on the market. Delivered as a Software Development Kit (SDK), it is composed of software libraries, modules and tools that are easily integrated into new or existing solutions. Developers benefit from market-leading IP flow parsing technology to bring detailed traffic visibility to network solutions up to Layer 7. Integration of Qosmos ixEngine as a software component removes the need to develop in-house protocol recognition capabilities, simplifying product development and accelerating delivery. Qosmos ixEngine can be used in all environments: physical, virtualized and in SDN architectures. Decoding engine

• Identification of protocols and applications behind each IP flow using a combination of advanced techniques including stateful inspection, behavioral and statistical analysis, heuristics, etc.
• Extraction of metadata from protocols (e.g. volume, delay, jitter, etc.) and applications (e.g. name of file streamed on a website). NOTE: requires prior decryption of traffic.

Protocol plugin bundle and updates

• Qosmos’ protocol plugin bundle includes thousands of protocol and application plugins to classify flows and extract metadata.
• Qosmos Labs continuously monitor protocols and applications updating protocol plugins to ensure they are always up-to-date

Deep file inspection module

• Identifies exchanges of suspicious files (i.e. incorrect / fake types or encrypted)
• Performs basic checks for malware detection and Data Leak Prevention

Rule engine module

• Executes customer-defined rules at run-time on output from classification and metadata extraction
• APIs configure rules and load them into rule engine at production stage; rules are expressed in JSON format

Custom signature model

• Allows users to develop custom protocol plugins that are integrated in the Qosmos ixEngine framework at run time