Using Deep Packet Inspection

HPE Aruba Networking Gateways support Deep Packet Inspection (DPI Deep Packet Inspection. DPI is an advanced method of network packet filtering that is used for inspecting data packets exchanged between the devices and systems over a network. DPI functions at the Application layer of the Open Systems Interconnection (OSI) reference model and enables users to identify, categorize, track, reroute, or stop packets passing through a network. ) of applications and application categories used by the connected clients.

The DPI feature enables Gateways to perform the following functions:

• Traffic Inspection and reporting — When DPI is enabled, Gateways perform DPI of application traffic and report it in the Gateway monitoring dashboard. The app library on Gateways includes a list of default applications and application categories on which you can enable deep packet inspection.
• Application control—Based on application usage and bandwidth consumption metrics, administrators can configure ACLs Access Control List. ACL is a common way of restricting certain types of traffic on a physical port. per application or application category and throttle bandwidth for mission-critical applications for traffic prioritization and QoS Quality of Service. It refers to the capability of a network to provide better service and performance to a specific network traffic over various technologies..

Figure 1  Enabling Deep Packet Inspection in the Gateway Dashboard

For more information, see the following topics:

• Configuring Per-Application Limits
• Enabling DPI for Application Visibility
• Enabling App Performance Monitoring
• Configuring Proxy Server on Branch Gateway for DPI
• Monitoring Application Usage
• Configuring Security Policies for Application Access Control