Embed Size (px)
Citation preview
Customer Case Study: Network Intelligence for Lawful lnterception U s e m L a w Enfmernent Agencies.
G ~ n r n ~
ixMachine LI Edition provides laser sharp interception probes to Lawful lnterception Supplier
Customer Overview like Qosm ,at has already developed and d
Utimaco is a leading provider of lawful .m Can the required protocol decoding interception solutions and has installed LI technology for advanced lawful interception
Management Systems in more than si- enabled Utimaco to avoid the upfront costs, countries around the world. As an active time to market delay, most of the long-term
participated in developing technical standard:= risks of in-h0use The was
and compliance tests. n -F. to integrate proven, pre-developed U probes
Utimaco Lawful Interception Management into existing and future solutions, and shift
System (LIMSTM) is a comprehensive solution the burden of keeping the probes updated
that provides state-of-the-art surveillance - - to a specialist like Qosmos, who has already
capabilities for fixed and mobile communication established ecessatY expertise and tools.
networks and for various communication
services, including telephony, messaging and The IP-based services like e-mail and VolP. Qosmos ixMachine LI tolrlon has been oeployeo
as passive probes that enhance Utimaco LlMS
The Challenge with the ability to parse communication flows
Utimaco needed to enhance the data collection and link them a range of virtual
capabilities of its interception solution V-! , online identities (email address, service login,
support an expanded base of IP based network IDs, etc.).
communications including Vole email and '&
The types of traffic intercepted by Qosm.,,
messaging services with the ability to monitor ixEngine
throughputs at several tens of Gbps. IP probe: optimized for monitoring
~ , . t o m m u n i c a t i o n s flows on network layer 2/3/4 The data collection function should interface , , ,:
with the existing mediation function provided in Gigabit and 10 Gigabit networks.
by Utimaco, and target users across their AAA probe: designed to extract
virtual identifiers in order to comply with the , Authentication, Authorization and
ETSl requirements for the x l (Administration). Accounting data from DHCP and RADIUS
x2 (Interception Related Information) and x3 protocols.
(Communication Content) interfaces. Internal Email probe: for intercepting standard email
development of this capability would take protocols
several man-months, time the company did not "OIP probe: used to extract the par
have. of the communication and the signaling ol
Working with a third-party specialist vendor standard VolP protocols
utimaco" a member d the-&h& GAP
I
"Qosmos' robust interception probes enable our solution to perform deeper packet analysis, with scalability from hundreds of Mbps to tens of Gbps. This results in real-time visibility into network streams for more efficient la W enforcement investigations. "
Michael Rucker, Product Manager, LI Solutions
Utimaco
Your Network is lnfonnation
Customer Csse Study Network Intelligence for Lawful Interception % QOSMOS
aw Enforcement Agency
Utimaco LIMSTM
'h QMMOS
n n
Why Qosrnc
Qosmos Network Intell~Y~nce/DPI technology
r ~dent~fies and analyzes data as ~t crosses networks. Its advanced technology goes deeper than mere data class~f~cat~on to also extract content and metadata and capture data flows- at rnultl-Gbps throuahputs - for a complete
I and.accurate unl andlng of network activ~ty , In real time.
As the only pure-play vendor ded~cated to Network lntell~gence, Qosmos dellvers the broadest and deepest network vlsibll~ty available today comblned w ~ t h the strongest multrprocessor architecture expertise, allowlng Ut~rnaco to see ins~de traff~c ~n real ~ I I , enabllng laser sharp lawful lntercept~l solut~ons at very high throughputs.
1 9 . - i , By ~ o u r b g p m m rrom Qosrnos, Utima_- as 1 a been able to fmps ori their core compeencie
and improve time to market of key features such as target detectioq and correlation J
technology. Their solution benefits from detbcting targets more accurately and rapidly' In the lncfeasinglycomplpJ( e&i;onment of 1P cohrnunicationf.
Q&- probes have been integrated pasily, enabtipg .the UMS solution to manage thkdata co l lqon funaim qulcklgr and cost-evedive$ ~artnddng with Q~sdos -with I& domai'
l ' exper&% in the recognition of ,P -br{
;t reaction time (measured ih days) for nw nrotocols - ensures that Utimaco benefiti from
, p l u t ~ d wdutians and releases.
- . - - I . . . - - . . .
- 0 Multi-serviceprobe: designed to .; : 1: Scalability .. '- " - *:7 concurrentiy IIWnitor kind of IP ::
. . LI system suppliers, Telecom Service Providers .. 3 based communication services such as .. I
and Law Enforcement Agencies (LEA) have to :':;l - Webmail.lnstant Messaging service. or Peer- manage an increasing volume of network traffic. ; to-Peer traffic. . - . - . Probes must be able to analyse this growing
. . . . - . . . amount of traffic in real time. Qosmos met
-As a result, Utimaco's service provider customers the technical challenge of high throughput IP - Can now provide law enforcement with --.: - -: - networks, providing Utimaco with equipment ; powerful analysis of a wider range of IP-based h i c h would scale from hundreds of Mbps --communications than was possible before, and to tens of ~ b ~ ~ . ~h~ expertise in symmetric
to rely on probes that will smoothly scale up to multiprocessing or SMP computing and the
: several tens of Gbps to support the growing ability to optimize its protocol decoding
: of traffic On next generation technology for this architecture enabled Qosmos L - -networks. - . . . - - . . - - . - . .
-~ . ' . . . to provide probes based on COTS IBM server
- - : c -. hardware that could support up to 4 000 kpps
i: Integration - : - - - .. - 7 . - traffic parsing in real-time with no packet loss. .The Qosmos ixMachine LI Edition probes : . - .' - . -have been easily integrated into the Utimaco Future-proof technology . LlMS system through standards X2 and X3 Qosmos probes use a softwarebased approach :connecton, feeding Utimaco's mediation specially designed to rapidly accommodate -device with lnterception Related Information the rapid evolution of new protocols regularly ' (IRI) and C~tllmunication Content (CC) in line entering the network (i.e. as a result of new ''with ET'S' standards. The Utimaco LIMS system services, regional protocol variants, proprietary then formats the data flows to be fed to applications etc). This reduces the time required
- HI2 and H13 interfaces. The Qosmos probe is to integrate new protocols for inspection from EMEA -configured through the x l interface to set off months to days. Q~~~~ technology also 5 Impasse Chalabre - 7501 7 Paris - France - specific interception triggers ~rovisioned by the features high packet-processing performance -. : Phone: +33 1 78 09 14 40 7 LIMS Operator. The result has ken a savings of that integrates the latest, standards-based, Email: [email protected] - months'dollars in deploying this capability by multi-rore technologies, for very high network - - - . - , - - Americas - partnering with Qosmos instead of developing performance. - -" - . - . .. .
- - S - - Germantown, MD, USA the solution in-house. - - . . . -- . . - . - - . ~- . - _ . . . , - . - Phone: +l 301 528 8301
. .- .. . - - . . - . . Email: [email protected]
. - ' . -
Asia Pacific Singapore Phone: +65 6396 6401 Email: [email protected]
I ~ . q 0 s m O s . c O m
