Virtual Network Packet Broker

Extension of the subscription licence by 1 CPU core

Extension of Subscription License (1 CPU Core) expands an existing software subscription to support an additional CPU core, increasing processing capacity for virtual network traffic visibility, filtering, and packet brokering. It enhances scalability across hybrid environments, including ESXi, OpenStack, and Docker, enabling improved traffic aggregation, replication, and load balancing between physical and virtual infrastructures.

The extension supports advanced features such as GTP correlation, tunnel, and Layer 7 filtering, deduplication, packet slicing, metadata extraction, and IPFIX/NetFlow generation. Centralized management via CLI, API, or NEOX Device Manager ensures consistent network transparency, optimized monitoring tool performance, and efficient handling of high-volume network traffic.

SKU NX-PBPT-L1 Category Tag

Description

The Subscription License CPU Core Extensions and 1 Year Software Maintenance & Support License (2 CPU Cores) provide a scalable foundation for advanced network visibility, traffic intelligence, and high-performance packet processing across modern hybrid IT environments. These licensing options are designed to extend processing capacity and ensure continuous software updates, technical support, and feature enhancements for virtual and physical network infrastructures.

Built for environments such as VMware ESXi, OpenStack, Docker, and hybrid data center architectures, these licenses enable seamless integration of virtual network traffic into monitoring and security tools. They improve observability across distributed systems by enabling efficient traffic aggregation, replication, filtering, and redirection between physical and virtual environments.With flexible CPU core scaling (1, 5, and 10 cores), organizations can optimize performance based on workload demands. The platform supports advanced traffic intelligence features, including GTP correlation, IMSI filtering, inner tunnel inspection, and deep packet inspection (DPI) for detailed application and user-level visibility. Additional capabilities such as deduplication, packet slicing, data masking, session tracking, and weighted load balancing ensure efficient use of monitoring resources while reducing unnecessary traffic overhead.

The solution also provides powerful telemetry and analytics functions, including IPFIX/NetFlow generation, metadata export to Kafka or Syslog, and nanosecond-accurate timestamping for precise forensic investigations and real-time monitoring. Advanced filtering options such as 5-tuple, regex-based, and user-defined filters (UDF) allow granular control over network traffic flows.Centralized management through CLI, SSH, SNMP, REST API, Web UI, and NEOX Device Manager ensures unified control, simplified deployment, and efficient scaling across large infrastructures.

The 1 Year Software Maintenance & Support License (2 CPU Cores) additionally ensures continuous access to updates, security patches, and technical assistance, keeping the platform optimized and reliable. Together, these licensing options deliver scalable network visibility, improved performance, and full lifecycle support for enterprise-grade hybrid and virtual network environments.

Additional Information

Features Benefits
Aggregation Aggregate and redirect network traffic for further processing
Replication Allow multiple tools to analyse the same traffic
Inner Tunnel Filtering Filtering according to inner tunnel parameters (GTP, VXLAN, L2TP)
GRE Tunnelling Interconnection of Packet Brokers across multiple sites using L3GRE & NVGRE protocol
Filtering Filtering out unnecessary network traffic with conditional 5-tuple classifiers
User Defined Filters (UDF) Track packets that match a specific “window” in incoming traffic
AND/OR/NOT Operatoren Simplify the operation of the Packet Broker with logical filter actions
Copy Enable orthogonal filter paths for the same network traffic
Layer-7 Filtering Perform DPI and identify thousands of Layer 7 protocols
Regex Filtering Identification and filtering of data traffic (stream- or packet-based) containing certain strings
Weighted Load Balancing Distribute traffic across multiple tools and prevent over-subscription
Session Tracking Track the entire session once the desired pattern has been identified
Port Labelling Track packet path by adding VLAN tags that indicate its ingress port
Header Stripping Remove headers (MPLS, VLAN, PPP, QinQ, VN-TAG, VXLAN, GRE, GTP, L2TP, Geneve)
Header Editing Modify MAC, VLAN and IP headers
Deduplication Maximize tool performance by eliminating duplicated packets
Data Masking Protect sensitive data by overwriting it before it is sent to the tools
Packet Slicing Reduce data overload by removing packet payload and/or any unnecessary data
Meta-data Extraction Generate Metadata to Syslog or Kafka servers
Capping & Sampling Reduce traffic by sampling traffic and/or limiting rates
Time Stamping Enhances network visibility with nanosecond time stamping capabilities
Capture & Replay Capture PCAP files in filter granularity and replay for further analysis
De-Fragmentation Assemble packet fragments to complete packets
IPFIX/NetFlow Generation and distribution of IPFIX/NetFlow flows
Management Web UI, SSH, CLI, SNMP, Net CONF, REST API

Related products