GenieNRM

An industry-leading telecom-grade network traffic controller providing application-level network traffic visualization and management

The emerging internet technologies have led Internet and Intranet into a new broadband era. Most of those new internet technologies have also brought in new malicious attacks, worms and network abuse which created new challenges to network managers and operators in managing their business-critical networks. Especially, the popularity of P2P and multimedia streaming applications has seriously impacted network operation because those applications are continuously generating huge amount of download and upload traffic that causes network congestion and performance deterioration, and even leading to customer dissatisfaction and business loss. As a result, Network managers are eagerly looking for solutions to maintain and protect the performance of their business and time-critical applications such as web, mail, VoIP and ERP while throttling high bandwidth consumer such as P2P applications. And GenieNPC 5800 Network Policy Controller is the only industry-leading solution that will satisfy those network management requirements.

Equipped with a state-of-the-art high-performance Network Processing Unit (NPU) and built-in Hardware DPI Accelerator (HDA) and Advanced Flow Tracking (AFT) engines, GenieNPC 5800 can accurately and effortlessly perform traffic classification, packet-level deep packet inspection, real-time traffic statistics exporting, and traffic control and management at layer 2/3/4 and user-application level, such as P2P applications, multimedia streaming applications, and VoIP (H.323, SIP, and Skype) applications.

In addition, GenieNPC 5800 has several industry-leading features such as built-in BGP agent to allow the network managers and operators to differentiate and manage the bandwidth requirements per transit, peering, on-net/off-net network traffics, and Subscriber Manager Agent (SMA) to allow the network managers and operators to manage the subscribers at service-level. To offer the network managers and operators an application-level network traffic visualization, GenieNPC has opted for the industry standard NetFlow protocols for exporting real-time traffic statistics to the external traffic analyzers and reports, such as GenieATM for analyzing and producing in-depth traffic reports. From those traffic reports, the network managers and operators are able to fully understand their network conditions, determine the possible network congestions, identify network abuse and anomaly traffic, and then create the most effective network management policies to better manage their network traffics.

Network Traffic Visualization and Management

Benefits
	Easy-to-define management policies
	firewall-like rules definition Control by Source, Destination IP or IP blocks Control by BGP AS or BGP communities Control by subscriber or subscriber groups Control by application type or application groups
	Mission-critical bandwidth protection (QoS)

	Subscriber-level bandwidth management
	Subscriber rate control Subscriber quota-limit
	Transit, peering, on-net/off-net bandwidth utilization

	Enhanced Bandwidth control actions
	Rate shaping by matching policy Traffic redirect by matching policy Traffic mirror by matching policy ToS mangling by matching policy Traffic priority by matching policy
	Minimizes bandwidth usage abuse

	Prevents network attacks, anomaly traffic

	Probe-mode traffic shaping

Benefits
	Full IP networks support

	VLAN domain support

	GRE tunneling protocol support

	Hardware-based Deep Packet Inspection
	100+ P2P patterns and signatures Multimedia & Streaming protocols VoIP (H323, SIP, Skype) protocols File Transferring protocols All IP-based and TCP/UDP port-based protocols
	Packet-Sampling NetFlow compatible with application ID traffic statistics export

	Real-time application-level network traffic visualization

	Impact-less probe-mode deployment

	Perfect 3rd party solution integration through Open-standard NetFlow compatible traffic statistics export

	In-depth traffic analysis with GenieATM
	Subscriber usage behavior report Per GRE, per VLAN, per sub-network traffic report Detail interface traffic report Anomaly traffic detection Network-wide trouble shooting

Perfect Solution for Any Network Environments
Service Providers

GenieNPC is an ideal traffic control solution for service providers to align bandwidth policy with cost/revenue. It enables the network operators to shape P2P applications usage on expensive transit bandwidth and minimize P2P impact on the overall network performance. It also distinguishes your business from other service providers by offering new value-added services and the quality of services to their customers.

Educational Institutions

GenieNPC enables campus networks to implement quality of service on their Internet connections. It allows the network operators to throttle high bandwidth consumers such as P2P and FTP applications and guarantee bandwidth for specific user groups such professor, administration and laboratory.

Large-scale Enterprises

GenieNPC enables enterprises to implement quality of service on Internet connection and VPN. It enables you to throttle high bandwidth consumers such as P2P applications and optimizing performance of business- and time-critical applications such as web, mail, ERP and VoIP. Business efficiency and employee productivity can be improved by GenieNPC deployment.

Key Features & Benefits

Hardware-based architecture
Utilizing a state-of-the-art network processor, GenieNPC is capable of performing L2/3/4 and L7 packet classification and forwarding packets with extreme high-speed

High system capacity
Tracking up to 4 million bi-directional connections, and managing up to 512,000 subscribers, while executing up to 65,000 run-time policy rules

Traffic classification
Classifying network traffic by GRE tunnels, VLAN domains, IP address groups (BGP and IP prefix), subscriber groups, and application types

Layer 7 deep packet inspection (DPI)
Utilizing HDA (Hardware DPI Accelerator) Engine inspects Layer 7 packet contents for accurate application identification, not only base on TCP/UDP ports

Control session tracking
Utilizing AFT (Advanced Flow Tracking) technology tracks control session to correctly reveal data session of VoIP (H.323, SIP) and FTP applications

Signature-based application detection
Identifying end user applications and protocols from distinctive signature in packet payloads, including: 100+ P2P Protocols, VoIP protocols, and Streaming Multimedia protocols

Port-based applications support
Identifying all traditional port-based applications and protocols

BGP support
Identifying transit/peering/on-net/off-net traffic to control bandwidth cost and enable differentiated services offering

Flexible bandwidth policy configuration
Managing network bandwidth by defining traffic directions, IP address groups, application types, and control actions to form easy-to-understand firewall-like bandwidth controlling policies

Enhanced packet controlling actions
On matching bandwidth policies, more refined controlling actions – ToS tag mangling, Traffic redirect, and priority queuing, can be applied to pass-through network packets

Intelligent traffic shaping
Cascading and multi-layer traffic shaping mechanism optimizes network bandwidth utilization

Schedule-based bandwidth limit
Network Managers can apply different bandwidth rates per different time periods



Subscriber Group Management through RADIUS Managing subscriber groups through acting as a RADIUS proxy, or sniffing RADIUS packets from pass-through network packets
Subscriber-level quota-limit Managing Subscriber’s internet usage by daily total transferring volumes
Non-intrusive traffic control Enabling network operators to control network traffic even in probe-mode deployment
SNMP support Exporting per policy forward/drop packet count and traffic volume of each bandwidth policy to enable network managers evaluate the effect of traffic control or traffic of applications bound to each policy
Traffic statistics export Exporting detail traffic information with application ID (identified by Layer 7 packet inspection) in NetFlow v5 compatible format enables network managers to understand true application distribution in network for better network planning and bandwidth policy enforcement
Multiple Inventory support Traffic from different interfaces of GenieNPC can be grouped into different Inventory and bound to different Exporter for NetFlow exportation. Traffic in each Inventory has its own attributes to distinguish from other traffic in NetFlow collector/analyzer
Multiple flow Exporter support Supporting up to 4 NetFlow collectors/analyzers to fulfill different traffic analysis requirements
High availability Active-active deployment and asymmetric stateful inspection deliver highest availability required by network managers
Flexible deployment For traffic analysis purpose only, probe mode deployment is preferred for an impact-less deployment to the current network environment; to perform traffic management, in-line mode can be chosen to intercept network links without any changes to router/switch link configuration
WebUI Graphical User Interface for intuitive system-wide configuration and management, and real-time traffic data report
Command Line Interface Support SSH secure shell, Telnet and Console for configuration and system upgrade
Firewall on management port ACL (access-group) can be applied to management port to prevent unauthorized access