Advanced Network Packet Broker Platform
The new generation of X3-Series Network Packet Brokers enables complete visibility over packets and flows and complex advanced processing for extended visibility. The X3-Series platform delivers versatile Network Packet Brokers with simple and advanced features.
To further enhance the flexibility of the X3-Series platform, multiple models are available to suit different deployment requirements optimally.
Available models
Advanced Network Packet Broker
ADVANCED TRAFFIC INTELLIGENCE
The X3-Series NPB offloads network security and performance monitoring tools by taking over advanced traffic optimization and shaping tasks, such as passive TLS Decryption, Data Masking, Packet Deduplication, NetFlow export and more.
By deploying an X3 advanced network packet broker, network blind spots can be eliminated, and network traffic handled by the device is shaped into actionable data.
X3-Series Network Packet Broker features
- Passive SSL/TLS decryption SSL 3.0, TLS 1.0 – TLS 1.2
- Data masking
- Packet deduplication
- TCP packet reordering and fragments re-assembling
- Full tunneling capability
- Packet Slicing
- IMSI Filtering
- Timestamping
- Export NetFlow v5/v9
- L2-L7 Filtering, DPI
- Load Balancing
- Any-to-any Replication and Aggregation
- Microburst Protection
Data Masking
Passive Out-of-Band Decryption
- Decrypted traffic can expose confidential data to network engineers and analysts, resulting in security or privacy implications.
- The X3-Series can obfuscate sensitive data to comply with regulations and prevent data leakages.
- Data masking enables complete visibility into decrypted data without the risk of exposing sensitive data.
- With a passive out-of-band TLS decryption deployment, the X3-Series uses a private key to decrypt the SSL traffic and forwards the traffic to out-of-band security or analysis appliances.
- Supports TLS 1.2 and below
X3-Series SSL/TLS In-Line Decryption
The X3 In-Line Decryption supports up to TLS 1.3 passive in-line decryption
Deploying Profitap’s X3-Series In-Line Decryption models as a dedicated solution can enable complete visibility into SSL/TLS traffic. Unencrypted traffic helps network engineers gain deeper visibility into traffic that would otherwise be an encrypted blind spot. Decrypting network traffic can also help speed up troubleshooting processes by helping identify the issue’s source faster.
The Passive In-line decryption ensures X3 In-Line Decryption model can deliver the relevant, decrypted data to the entire security stack without affecting security tool performance.
X3-Series SSL/TLS features
- Passive In-line decryption and re-encryption
- Offload decryption load from security tools
- Scalability: decrypt once, send to multiple tools
- Supports up to TLS 1.3
- TLS 1.3 in-line decryption is done via a proxy
X3-Series GTP Correlation
The X3-Series GTP Correlation models are purpose-built for GPRS Tunneling Protocol (GTP) traffic correlation and filtering.
GTP traffic correlation provides network engineers with valuable insights into mobile network performance, security, and user experience, enabling them to address issues and optimize network performance proactively.
The following filters can be applied:
- IMEI
- MSISDN
- IMSI prefix and IMSI suffix
- TEC
- Cell ID
With these filters, the X3-Series GTP Correlation device can identify the control traffic and provide the correlated control and data traffic through replication and session-aware load balancing.
X3-Series GTP Correlation features
- Reliable correlation of subscriber sessions helps better understand network traffic patterns and identify potential issues that may impact network performance
- Identify potential security threats and vulnerabilities, such as malicious attacks or unauthorized access attempts over the GPRS Tunneling Protocol
- Correlated GTP traffic helps network engineers quickly isolate and troubleshoot issues, reducing mean time to repair (MTTR) and minimizing downtime
- Correlating GTP traffic helps ensure a positive user experience with network services by identifying and addressing performance issues that impact user satisfaction
- Scalability: easy traffic forwarding to multiple tools
- Reliability: purpose-built hardware for optimal performance
- L3-L4 filtering
- Aggregation
- Load balance traffic output based on subscriber (IMSI) information
- Up to 100 000 filters
4 x 40G/100G QSFP28
2 x 40G/100G QSFP28
or
30–72 VDC
| PT-1G-BT-45 | PT-1G-SX-85 | PT-1G-LX-31 | PT-10G-BT-45 | PT-10G-SR-85 | PT-10G-LR-31 |
|---|---|---|---|---|---|
 |
 |
 |
 |
 |
 |
| 1000BASE-T SFP 100m (RJ45) | 1000BASE-SX SFP 850NM 550M (LC) | 1000BASE-LX/LH SFP 1310nm 20km (LC) | 10GBASE-T SFP+ 30M (RJ-45) | 10GBASE-SR SFP+ 850NM 300M (LC) | 10GBASE-LR SFP+ 1310NM 10KM (LC) |
| PT-40G-SR4-85 | PT-40G-LR4-31 | PT-40G-PLR4-31 | PT-40G-SR-BD | PT-40G-SR-BD-RX | PT-100G-SR4-85 |
|---|---|---|---|---|---|
 |
 |
 |
 |
 |
 |
| 40GBASE-SR4 QSFP+ 850NM 150M (MTP/MPO) | 40GBASE-LR4 QSFP+ 1310NM 10KM (LC) | 40GBASE-PLR4 QSFP+ 1310nm 10km (MTP/MPO) | 40GBASE-SR-BiDi QSFP+ 150m (LC) | 40GBASE-SR-BiDi QSFP+ 150m (LC) Rx only | 100GBASE-SR4 QSFP28 850nm 100m (MTP/MPO) |
| PT-100G-LR4-31 | PT-100G-SR-BD-RX | ||||
|---|---|---|---|---|---|
 |
 |
||||
| 100GBASE-LR4 QSFP28 1310nm 10km (LC) | 100GBASE-SR-BiDi QSFP28 100m (LC) Rx only |
Thank you!
Your submission has been sent. If you want more information, solutions, and use cases, check out the links below:Did You Know?
Related Products
High Density Fiber TAP
Secure traffic access for out-of-band deployments
Bypass TAPs
Fail-safe traffic access for in-line security tools
XX-720G Network Packet Broker
Traffic aggregation and distribution