» Global Velocity Deep Packet Inspection

DPI is essential for controlling network traffic.

Many traditional firewalls do not inspect deeper than the network and transport layers. However, the GV-2010 performs Deep Packet Inspection (DPI), which allows it to inspect a greater portion of network data than traditional firewalls. 

Traditional firewalls filter traffic based on simple rules, such as packets originating from or sent to certain network addresses and ports, but they are not capable of inspecting packet payloads, where more relevant data is contained. 

The payload of a typical TCP/IP packet, which makes up 85 percent of all Internet traffic, represents over 87 percent of the packet's total size. The payload escalates to 97 percent of the total on the largest packets, as shown in the following figure:

The payload can include legitimate e-mail and Web traffic, but it can also include virus signatures, spam, spyware, peer-to-peer and online game traffic as well as traffic that may be prohibited by your organization. 

Without DPI to look beyond the network and transport layers, many of these threats can never be seen until the packet reaches its destination. The GV-2010 effectively eliminates this security and traffic management loophole.

» Technology

• » Reprogrammable Hardware
• » Accurate Pattern Matching
• » Deep Packet Inspection
• » TCP Flow Control
• » MicroTCA™

• » Deep Packet Inspection
• » Bloom Filter String Matching

"“When we spoke with the folks at Global Velocity - the company's corporate headquarters is in Clayton, Mo., with an office in Palo Alto, Calif. - we were impressed with what we termed “DLP on steroids”.  This is one hot box … We liked this product and the company for their creative approach to a real problem: deep analysis at very high speeds and reduction of the number of boxes needed to put on our perimeters.”"