IC2 Deep packet inspection (DPI) reports and everything you need to know about it

Knowledgebase Tips and Tricks
22

Hi @Michael / @TK_Liew
On the above subject, even we are unable to see the DPI option in IC Control - have tried different browsers as well.

Is there something specific for us to fix like @cgreen

thanks

23

Please ensure you meet the requirement here.

1 Like
24

Is there any chance that the MAX BR1 can have this feature in IC2, or any alternate way to access this from the said device?

25

The MAX BR1 ENT supports this feature. Thanks

1 Like
26

So my device a relatively older model balance 20 hardware v 1 is according to the specs not supported for DPI; is that something that might be supported in the future with future firmware updates or is the hardware incapable of doing so?? Thx

27

The Balance 20 is not supported due to hardware limitations. Thanks

1 Like
28

Are there any details on how DPI is matching traffic, is it just port based recognition using the IANA defined list?

I only ask as Iā€™ve seen some odd classification by the tool for some applications.

29

We are classifying by application, not by port. Can you share what odd classification you have observed?

1 Like
30

Hi TK, I just wondered how Peplink are doing this, in one example I have a customer Balance which is showing 75% of the traffic as ā€œunclassifiedā€ so it cant seem to identify it, see this example below.

image

1 Like
31

Please open ticket for us to take a close look. We wish to check that.

Thanks.

1 Like
32

We have exactly the same behavior here.

33

Engineering team is improving DPI engine to gather more traffics protocols for the DPI reports. One of the common traffics that is not included will be VPN traffics. May i know any VPN running for the device ? If yes then mostly it should be VPN traffics and other custom traffics.

Possible, please open a support ticket for us to further confirm the network traffics type involved and for sure will include the improvement for the future firmware release.

1 Like
34

Looking at our DPI reports, the ā€œunclassifiedā€ correlates quite closely with VPN traffic.
One thing I am curious about: Some traffic is classified as ā€œappleā€ and ā€œgoogle.ā€ Given that the rest are protocols (afp, imap, ssl, http, etc) what do the company names mean?

35

Those related to the vendor specific traffics.

1 Like