VAS Experts: SCAT DPI Traffic Control and Analysis System

2017: DPI 7.0 SCAT

In version 7.0, in addition to improving the main functions, the current IPv6 protocol has been added and the BRAS and CG-NAT capabilities have been expanded.

1. Initial IPv6 support:

• filtration,
• protocol recognition,
• exporting metadata
• Export IPFIX/Netflow v10.

2. L2 BRAS functions:

• VLAN/QinQ termination (automatic removal and tagging of traffic transit through DPI)
• DHCP relay (proxying DHCP requests from private subnets to an external DHCP server and monitoring the issued IP addresses);
• DHCP-Radius gateway (the ability to request DHCP settings via Radius without the DHCP server)
• IP Source Guard.

3. Radius Accounting (a possibility of accounting of subscriber traffic under the Radius protocol).

4. Supports GRE tunneling via built-in NAT (PPTP/GRE ALG).

2016: SCAT DPI 6.0

On December 14, 2016, VAS Experts announced the release of SCAT DPI 6.0 Sevastopol.

The solution combines the accumulated experience in developing previous versions of the product and knowledge in the field of deep traffic analysis.

DPI 6.0 Sevastopol SCAT contains the following functionality:

• The full set of functions for working as L3 BRAS:
• Expanded support for working with Radius servers:
• authorization of subscriber sessions, loading of policies (settings of the tariff plan and services), blocking by balance;
• supports dynamic policy management through CoA and Disconnect events.
• Polishing the subscriber band in accordance with the tariff plan.
• QOS, prioritization of traffic within the subscriber band by protocols and directions.
• Supports subscribers with dynamic IP addresses and arbitrary number of addresses.
• Development of NAT - improved support for full cone mode, added the ability to assign NAT service for users with a mixed set of gray and white addresses.
• Added export to IPFIX and hostname log for HTTPS, QUIC, and resource lock feature.
• Supports the PCRF policy management server (external or integrated).

VAS Experts continues to rapidly expand the capabilities of SCAT DPI, increasing its value to existing and new customers and reducing payback times. Using a general-purpose hardware platform, the possibilities for its further development are almost unlimited, and the licensing policy protects the investments previously made by customers, allowing you to linearly scale the solution and take into account the already purchased licenses in the cost of the upgrade. This makes our DPI platform a unique and most profitable offer on the market, which is confirmed by the number of installations in Russia and abroad. Dmitry Moldavanov, CTO of VAS Experts

The SCAT solution is available under three licenses - Entry, Base, Complete. The L3 BRAS and CG-NAT functions are part of the Complete license.

Basic description of DPI SCAT

SCAT "Traffic Control and Analysis System" - Deep Packet Inspection platform provides packet inspection, performs traffic classification and processing. Opportunities:

• BRAS with DualStack IPv4/IPv6 and L3 (IPoE) and L2 (DHCP, PPPoE, ARP) modes
• Traffic Analysis at L2-L7 Levels by OSI Model with Quality of Experience Visualization
• Filtering of sites according to the register of the ILV and the Ministry of Justice, according to their own white and black lists
• Prioritizing traffic across protocols and applications to ensure high quality of service (QoS)
• CG-NAT and NAT 1:1 with unloading of logs for SORM
• Detection of more than 6000 protocols
• Support for "in-gap" operation patterns, with out-traffic asymmetry, with traffic mirroring
• Management of subscribers with dynamic IP addressing, with multiple IP addresses
• Simultaneous support of several types of Netflow: full, total by classes and subscribers for billing, by protocols and directions (AS)

See also

• Blocking sites in Russia

• Copyright on the Internet
• Internet censorship. World experience
• Censorship (control) on the Internet. China experience
• Censorship (control) on the Internet. Experience of Russia, Roskomnadzor, GRCC
• Runet Regulation Act
• VPN and privacy (anonymity, anonymizers)
• Autonomous Internet in Russia
• SORM (System of operational-search measures)
• State System for Detection, Prevention and Elimination of Consequences of Computer Attacks (State system of detection, prevention and elimination of consequences of computer attacks)
• National Internet Traffic Filtering System (NaSFIT)
• Yastreb M Statistika of telephone conversations
• How to get around internet censorship at home and in the office: 5 easy ways
• Auditor - site blocking control system in Russia