Scalable 10-400G Packet Services & Network Packet Brokering
Aggregate and Optimize Packet Data Across Your Monitoring Infrastructure
ASIC Performance | Stacking Extensibility | Inline Operation
Aggregation
Aggregate traffic from multiple TAP, SPAN, and network links into a unified monitoring stream. PacketLion consolidates high-density network feeds and simplifies traffic distribution, enabling monitoring and security tools to efficiently analyze data from across the entire infrastructure.
Visibility
Provide comprehensive visibility across multiple network segments by centralizing packet streams for monitoring and analysis. PacketLion ensures security and observability tools receive consistent traffic feeds, helping teams detect threats, troubleshoot performance issues, and monitor network activity more effectively.
Scalability
Scale network visibility architectures with a high-density aggregation layer designed for large environments. PacketLion enables organizations to efficiently connect multiple network segments and monitoring tools, supporting growth in traffic volumes and infrastructure complexity.
PacketLion 3XL Network Packet Broker
The PacketLion Model 3XL is a next-generation ultra-high-speed Network Packet Broker engineered for 400G visibility and security needs. Featuring 32 x QSFP-DD ports supporting 10G to 400G and allowing up to 128 x 10G/25G/50G/100G through fan-out, it’s ideal for the most demanding aggregation, inline, and breakout use cases. Powered by a 12.8 Tbps non-blocking architecture with line-rate throughput, the PacketLion 3XL delivers lossless performance, ultra-low latency, and 64MB buffers to absorb microbursts.
It supports advanced L2–L4 filtering, load balancing, and tunnel filtering (GTP, MPLS, GRE, L2TP), with flexible mapping (1:1, N:N, N:1, 1:N) and packet slicing capabilities. With modular QSFP-DD design, the system can aggregate traffic across 10G, 25G, 40G, 50G, 100G, 200G, and 400G interfaces, delivering high-density scalability in modern data center or core network environments.
Security teams benefit from real-time traffic forwarding to NDR, SIEM, IDS/IPS tools with filter rules (MAC, VLAN, IP, DSCP, TCP flags, MPLS) and support for user-defined filtering (UDF). The unit supports hot-swappable redundant fans, AC/DC power supplies, Jumbo Frame support, digital diagnostics monitoring (DDM), and detailed syslog/SNMP traps for operational visibility.
Administrators can manage the PacketLion 3XL via CLI, SSH, SNMP v2/v3, Web UI, NetConf, or REST API, with centralized control via NEOX PacketDirector. PacketLion 3XL is the most powerful and flexible option in the portfolio, ideal for hyperscale and multi-100G monitoring deployments.
- Aggregate and centralize massive network traffic volumes with a high-density 400G aggregation platform designed for modern data centers and service provider environments
- Scale network visibility infrastructures with up to 12.8Tbps non-blocking throughput, with support for multi-speed interfaces from 10G to 400G in a compact 1RU appliance, enabling organizations to support growing traffic demands without redesigning monitoring architectures
- Deliver enterprise-grade reliability and performance built on high-performance switching silicon designed for large-scale network visibility deployments
- Simplify complex monitoring environments by consolidating traffic from multiple TAP and SPAN sources into a single high-performance aggregation layer
- Maximize the efficiency of security and monitoring tools by intelligently distributing packet streams across multiple analysis platforms
- Enable flexible deployment architectures with support for both inline and out-of-band traffic aggregation and security service chaining
- Enhance network monitoring accuracy with advanced filtering and traffic steering that ensures tools receive only the traffic they need
- Ensure continuous operation in mission-critical environments with redundant power supplies, hot-swappable cooling, and data-center-optimized airflow
- Reduce operational complexity with centralized management of multiple PacketLion devices through NEOX PacketDirector
- High-density aggregation of 10G, 25G, 40G, 50G, 100G, 200G, and 400G TAP/SPAN/Tool ports
- Native port density of 32 x 400G QSFP-DD ports (with downspeed operation of 32 x 10G/25G/50G/100G/200G) in 1RU form factor
- Expanded port density of 64 x 40G or 128 x 10G/25G/50G/100G ports via fan-out cables
- Line-rate aggregation, processing, brokering, and regeneration of network traffic with up to 12.8Tbps non-blocking throughput
- Buffer size of 64MB with support for jumbo frames
- Inline or out-of-band deployment for security tool service-chaining and security delivery
- Flexible port mapping (1:1, N:N, N:1, 1:N)
- Port splitting (simplex mode)
- Port labeling
- Packet slicing/truncation
- Header stripping (limited) and VLAN stripping
- Load balancing based on 5-tuple criteria
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS)
- Filtering within a tunnel (GTP, L2TP, MPLS, GRE)
- Support for user-defined filtering rules (UDF)
- Versatile management options (CLI, SSH, SNMP v2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- Central manageability of multiple PacketLion devices through NEOX PacketDirector
- RADIUS, TACACS+, and LDAP
- Digital Diagnostics Monitoring (DDM)
- N+1 redundant, hot-swappable fans
- Hot-swappable, load-sharing, and redundant AC/DC power supplies
- Front-to-back and back-to-front airflow for a data center hot/cold aisle
| SKU | 40G/100G/200G/400G | 40G/200G | 10G/25G/50G/100G |
|---|---|---|---|
| NX-PBPL-3XL | 32 x QSFP-DD Ports | 64 x (Fan Out/Break Out via QSFP-DD) | 128 x (Fan Out/Break Out via QSFP-DD) |
PacketLion 2L Network Packet Broker
The PacketLion Model 2L is a high-density, multi-speed aggregation packet broker designed for ultra-reliable visibility in mission-critical networks. Featuring 32 x QSFP28 ports with support for 40G and 100G, and the ability to expand to 64 x 50G or 128 x 1G/10G/25G through breakout cables, it offers unparalleled flexibility and scalability. Built on a non-blocking architecture with N+1 redundancy, the system guarantees line-rate performance of 3.2Tbps with zero packet loss, even in high-throughput environments. A dedicated ASIC engine and 32 MB buffers eliminate microburst issues, ensuring seamless traffic flow across all ports.
Supporting aggregation and regeneration across multiple speeds, the Model L2 enables intelligent filtering, load balancing, tunnel filtering (GTP, GRE, MPLS, L2TP), user-defined rules (UDF), and packet slicing for optimal bandwidth usage. Features like MAC/VLAN/IP filtering, L2GRE tunneling, timestamping, port labeling, and MPLS stripping empower security teams with granular control for precise traffic delivery. The appliance is fully deployable in inline active or bypass modes, supporting SIEM, IDS/IPS, and NDR systems for real-time threat detection and response.
Modular and scalable, the PacketLion Model 2L supports stacking of up to 99 devices—managed centrally through NEOX PacketDirector—and can function as a single logical system. It includes versatile management interfaces (CLI, SSH, SNMP v2/v3, Web UI, NetConf, REST API), hot-swappable power supplies, and redundant fans, all in a compact design. With support for Jumbo Frames, digital diagnostics monitoring (DDM), syslog/SNMP traps, PacketLion 2L delivers high-performance, cost-effective, and scalable packet visibility for today’s hybrid networks.
- Aggregate and streamline high-speed network traffic with a high-density multi-speed aggregation platform designed for modern monitoring infrastructures
- Scale network visibility with flexible connectivity across 40G, 50G, 100G, and lower-speed environments through breakout support
- Simplify complex monitoring environments by consolidating traffic from multiple network segments into a centralized aggregation layer
- Maximize the efficiency of security and performance monitoring tools by distributing packet streams across multiple analysis systems
- Enable flexible deployment architectures supporting inline monitoring, security service chaining, and out-of-band traffic delivery
- Enhance traffic visibility with advanced filtering and intelligent traffic steering for optimized monitoring workflows
- Deliver enterprise-grade reliability with redundant power, resilient hardware design, and high-availability architecture
- Support scalable network visibility architectures as traffic volumes and monitoring requirements grow
- Simplify operations with centralized orchestration through NEOX PacketDirector
- High-density aggregation of 1G, 10G, 25G, 40G, 50G, and 100G TAP/SPAN/Tool ports
- Native port density of 32 x 100G QSFP28 ports (with downspeed operation of x 40G) in 1RU form factor
- Expanded port density of 64 x 50G or 128 x 1G/10G/25G via fan-out cables
- Extensibility through stacking of up to 99 devices in a ring or mesh topology
- Line-rate aggregation, processing, brokering, and regeneration of network traffic with up to 3.2Tbps non-blocking throughput
- Buffer size of 32MB with support for jumbo frames
- Timestamping (nanosecond) via NTP
- Inline or out-of-band deployment for security tool service-chaining and security delivery
- Flexible port mapping (1:1, N:N, N:1, 1:N)
- Port splitting (simplex mode)
- Port labeling
- Packet slicing/truncation
- Header stripping (limited) and VLAN/MPLS tag stripping
- Load balancing based on 5-tuple and GTP
- Support for L2GRE tunneling protocol
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS)
- Filtering within a tunnel (GTP, L2TP, MPLS, GRE)
- Support for user-defined filtering rules (UDF)
- Versatile management options (CLI, SSH, SNMP v2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- Central manageability of multiple PacketLion devices through NEOX PacketDirector
- RADIUS, TACACS+, and LDAP
- Digital Diagnostics Monitoring (DDM)
- N+1 redundant, hot-swappable fans
- Hot-swappable, load-sharing, and redundant AC/DC power supplies
- Front-to-back and back-to-front airflow for a data center hot/cold aisle
| SKU | 40G/100G | 50G | 1G/10G/25G |
|---|---|---|---|
| NX-PBPL-2L | 32 x QSFP28 | 64 x (Fan Out/Break Out via QSFP28) | 128 x (Fan Out/Break Out via QSFP28) |
PacketLion 1L Network Packet Broker
The PacketLion Model 1L is a high-performance aggregation packet broker purpose-built for large-scale, high-speed networks demanding uncompromised visibility, reliability, and control. With 8 x 40G/100G QSFP28 and 48 x 1G/10G/25G SFP28 ports including breakout capabilities for 16x 50G or 32x 1G/10G/25G, it supports flexible 1:1, 1:N, N:1, and N:N port mapping, enabling seamless aggregation, regeneration, and distribution of traffic across diverse network topologies. Its non-blocking backplane and line-rate performance of 2Tbps ensure zero packet loss, even under peak traffic bursts—backed by a dedicated ASIC engine for real-time, complex filtering, slicing, tunnel parsing, and header manipulation with its buffer size 32MB.
Engineered for low-latency processing and modular deployment, PacketLion 1L supports packet slicing, MAC/VLAN/IP/TCP filtering, tunnel-aware filtering (GTP, GRE, MPLS, L2TP), L2GRE tunneling, and load balancing based on 5-tuple criteria. With support for MPLS stripping, port splitting (simplex mode), jumbo frames, digital diagnostics monitoring (DDM), and UDF (user-defined filters), it delivers maximum granularity for routing and inspection. Operational resilience is ensured with N+1 redundant fans, hot-swappable AC/DC power supplies, and full-stack protocol support.
Ideal for both inline and out-of-band use cases, PacketLion delivers real-time traffic to SIEM, IDS/IPS, NDR, and threat-hunting tools. It supports port labeling, stacking of up to 99 devices in ring or mesh, and centralized management via NEOX PacketDirector. Whether used as a core aggregator or as a standalone smart NPB, PacketLion Model 1L empowers security teams with unmatched traffic visibility, high-density scalability, and intelligent control—all at line rate, without compromise.
- Consolidate traffic from mixed-speed network links into a single high-performance aggregation platform designed for enterprise visibility deployments
- Support flexible connectivity across 1G, 10G, 25G, 40G, and 100G environments, enabling seamless integration into existing infrastructures
- Simplify network monitoring architectures by aggregating TAP and SPAN traffic from multiple network segments
- Optimize the performance of security and monitoring tools by distributing traffic streams efficiently across analysis platforms
- Enable flexible deployment across inline and out-of-band monitoring architectures
- Improve monitoring accuracy with advanced filtering and traffic steering capabilities
- Deliver consistent performance with line-rate aggregation and non-blocking architecture
- Ensure operational resilience with enterprise-grade hardware and redundant system components
- Simplify management through centralized control via NEOX PacketDirector
- High-density aggregation of 10G, 25G, 40G, 50G, and 100G TAP/SPAN/Tool ports
- Native port density of 48 x 25G SFP28 ports (with downspeed operation 48 x 10G) and 8 x 100G QSFP28 ports (with downspeed operation 8 x 40G) in 1RU form factor
- Additional expanded port density of 32 x 10G/25G ports via fan-out cables
- Extensibility through stacking of up to 99 devices in a ring or mesh topology
- Line-rate aggregation, processing, brokering, and regeneration of network traffic with up to 2Tbps non-blocking throughput
- Buffer size of 32MB with support for jumbo frames
- Timestamping (nanosecond) via NTP
- Flexible port mapping (1:1, N:N, N:1, 1:N)
- Port labeling
- Packet slicing/truncation
- Header stripping (limited) and VLAN/MPLS tag stripping
- Load balancing based on 5-tuple and GTP
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS)
- Tunnel filtering (GTP, L2TP, MPLS, GRE)
- Support for user-defined filtering rules (UDF)
- Versatile management options (CLI, SSH, SNMPv2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- Central manageability of multiple PacketLion devices through NEOX PacketDirector
- RADIUS, TACACS+, and LDAP
- Digital Diagnostics Monitoring (DDM)
- NTP time sync management
- N+1 redundant, hot-swappable fans
- Hot-swappable, load-sharing, and redundant AC/DC power supplies
- Front-to-back and back-to-front airflow for a data center hot/cold aisle
| SKU | 1G/10G/25G/40G/100G | 1G/10G/25G | 50G | 10G/25G |
|---|---|---|---|---|
| NX-PBPL-1L | 8 x QSFP28 | 48 x SFP28 | 16 x (Fan Out/Break Out via QSFP28) | 32 x (Fan Out/Break Out via QSFP28) |
PacketLion 1S2 Network Packet Broker
The PacketLion Model 1S2 is a versatile and high-performance 1U Network Packet Broker purpose-built for high-density 1G to 100G visibility use cases. Equipped with 48 x 1G/10G SFP+ ports and 6 x 40G/100G QSFP28 ports, it also supports 12 x 10G/25G/50G via fan-out, delivering line-rate, lossless performance across mixed-speed environments. Powered by 1.08Tbps throughput and 32MB buffer, it ensures non-blocking architecture, low-latency delivery, and resilience via N+1 redundancy.
Advanced capabilities include L2–L4 packet filtering, load balancing, MAC replacement, packet slicing, MPLS stripping (up to 7 labels), and nanosecond timestamping per port or per filter rule. Support for tunneling protocols like L2GRE and VXLAN, along with stacking for up to 99 units, makes 1S2 a robust aggregation and inline security node. Flexible port mapping (1:1, N:1, N:N, 1:N) and tool chaining enhance visibility and simplify scaling in complex environments.
The PacketLion 1S2 integrates easily into security workflows by providing real-time delivery to IDS, IPS, NDR, and SIEM tools, and supports Active Inline and Bypass deployment modes. Management is streamlined via a unified interface, including CLI, SNMP, SSH, Web UI, REST API, and NetConf, plus console and RJ45 management ports. With 4+1 hot-swappable fans, and centralized control through NEOX PacketDirector, the PacketLion 1S2 is an ideal mid-range solution for intelligent traffic visibility, threat detection, and network observability at scale.
- Provide high-density aggregation for 1G to 100G monitoring environments in a compact 1U network visibility platform
- Deliver reliable, line-rate packet aggregation with non-blocking architecture and low-latency forwarding
- Simplify monitoring deployments by consolidating traffic from multiple network segments into a centralized aggregation layer
- Improve security monitoring and performance analysis by efficiently distributing traffic streams to multiple analysis tools
- Enable flexible deployment across enterprise, cloud edge, and service provider monitoring infrastructures
- Enhance network visibility with advanced filtering and traffic steering capabilities
- Support scalable observability architectures as network speeds and monitoring requirements evolve
- Ensure continuous operation with redundant hardware components and resilient platform design
- Simplify management through centralized control using NEOX PacketDirector
- High-density aggregation of 1G, 10G, 40G, and 100G TAP/SPAN/Tool ports
- Native port density of 48 x 10G SFP+ ports (with downspeed operation of 32 x 1G) and 6 x 100G QSFP28 ports (with downspeed operation of 6 x 40G) in 1RU form factor
- Expanded port density of 12 x 1G/10G/25G/50G ports via fan-out cables
- Extensibility through stacking of up to 99 devices in a ring or mesh topology
- Line-rate aggregation, processing, brokering, and regeneration of network traffic with up to 1.08Tbps non-blocking throughput
- Buffer size of 32MB with support for jumbo frames
- Timestamping (nanosecond) via NTP
- Inline or out-of-band deployment for security tool service-chaining and security delivery
- Flexible port mapping (1:1, N:N, N:1, 1:N)
- Port splitting (simplex mode)
- Port labeling
- Packet slicing/truncation
- MAC replace
- Header stripping (limited) and VLAN/MPLS tag stripping
- Load balancing based on 5-tuple and GTP
- Support for L2GRE and VXLAN tunneling protocol
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS)
- Filtering within a tunnel (GTP, L2TP, MPLS, GRE)
- Support for user-defined filtering rules (UDF)
- Versatile management options (CLI, SSH, SNMPv2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- Central manageability of multiple PacketLion devices through NEOX PacketDirector
- RADIUS, TACACS+, and LDAP
- N+1 redundant, hot-swappable fans
- Hot-swappable, load-sharing, and redundant AC/DC power supplies
- Front-to-back and back-to-front airflow for a data center hot/cold aisle
| SKU | 40G/100G | 1G/10G | 1G/10G/25G/50G |
|---|---|---|---|
| NX-PBPL-1S2 | 6 x QSFP28 | 48 x SFP+ | 12 x (Fan Out/Break Out via QSFP28) |
PacketLion 1SC Network Packet Broker
The PacketLion Model 1SC is a powerful 1U visibility platform purpose-built for intelligent aggregation, filtering, and delivery of network traffic upto 108Gbps at line rate without packet loss. Featuring 48 x 10/100/1000Mbps RJ45 and 6 x 1/10G SFP+ ports, with its cost effective design it is ideal for branch offices, edge environments, and distributed deployments. Its non-blocking architecture ensures performance and precision during high-volume, bursty traffic with 4MB buffer size.
The PacketLion 1SC provides flexible port assignment (1:1, N:1, N:N, 1:N), with robust support for MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, and MPLS filtering. Advanced visibility features include L2-L4 packet filtering, load balancing, L2GRE/VXLAN tunneling and termination, MAC replacement, packet slicing, and nanosecond timestamping. It also supports tunnel filtering protocols like GTP, L2TP, GRE, VxLAN, and MPLS, delivering full-spectrum traffic visibility to inline and out-of-band security tools including NDR, IDS/IPS, and SIEM, stacking of up to 99 devices in ring or mesh.
With service chaining, port splitting, and stacking support for up to 99 units, the PacketLion 1SC is also deployable in inline node, ensuring high availability. Integrated management options include CLI, SNMP v2/v3, Web UI, REST API, NetConf. It also features drag-and-drop filtering, management and console ports, and centralized control via NEOX PacketDirector—making it a flexible, compact, and intelligent network visibility solution for modern monitoring environments.
- Deliver cost-effective traffic aggregation for edge, branch, and distributed monitoring environments
- Consolidate traffic from 1G and 10G TAP and SPAN sources into a compact packet broker platform
- Simplify monitoring infrastructures by centralizing network traffic for security and performance analysis
- Improve monitoring efficiency by delivering optimized packet streams to analysis tools
- Enable flexible deployment across branch offices, remote sites, and distributed network environments
- Enhance visibility with advanced filtering and traffic steering capabilities
- Provide reliable packet delivery with non-blocking architecture and line-rate performance
- Ensure operational resilience with enterprise-grade hardware reliability and system monitoring features
- Reduce operational complexity with centralized management via NEOX PacketDirector
- High-density aggregation of 1G and 10G TAP/SPAN/Tool ports
- Native port density of 48 x 10/100/1000M RJ45 and 6 x 10G SFP+ ports (with downspeed operation of 6 x 1G) in 1RU form factor
- Line-rate aggregation, processing, brokering, and regeneration of network traffic with up to 108Gbps non-blocking throughput
- Extensibility through stacking of up to 99 devices in a ring or mesh topology
- Buffer size of 4MB with support for jumbo frames
- Inline or out-of-band deployment for security tool service-chaining and security delivery
- Flexible Port Assignment (1:1, N:N, N:1, 1:N)
- Port splitting (simplex mode)
- Port labeling
- acket slicing/truncation
- MAC replace
- Header stripping (limited) and VLAN/MPLS tag stripping
- Load balancing based on 5-tuple and GTP
- Support for L2GRE tunneling protocol
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS)
- Filtering within a tunnel (GTP, L2TP, MPLS, GRE)
- Support for user-defined filtering rules (UDF)
- Versatile management options (CLI, SSH, SNMPv2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- Central manageability of multiple PacketLion devices through NEOX PacketDirector
- RADIUS, TACACS+, and LDAP
- Digital Diagnostics Monitoring (DDM)
- N+1 redundant, hot-swappable fans
- Hot-swappable, load-sharing, and redundant AC/DC power supplies
- Front-to-back and back-to-front airflow for a data center hot/cold aisle
| SKU | 1G/10G | 10/100/1000M |
|---|---|---|
| NX-PBPL-1SC | 48 x RJ45 | 6 x SFP+ |
FEATURED RESOURCES
Network Visibility for Our Customers
Infographic
Why You Need a Packet Broker
Video
Why Not to Use Just Any Packet Broker
Case Study
Digital Services for Telecom
Deployment
SERVICE & SUPPORT
Unparalleled Multi-Level Service & Support for Peace of Mind
All NEOXPacketLion NPBs come with NEOX SILVER Support and can be upgraded to GOLD Support for advanced replacement in case of a hardware failure.