Improve the performance of cyber security systems with Cubro Omnia SEC solution

In a dynamic mobile broadband environment, communications service providers (CSPs) are struggling to effectively manage growing user traffic dominated by streaming services and other trusted sources. Focusing on irrelevant data not only drains resources, but also contributes to constant false positives, hampering effective security efforts.

Reducing traffic copies vs. performance of cyber security systems

Realizing the key role of traffic reduction in supporting cyber security tools, Cubro offers an optimization solution for CSPs. Omnia SEC addresses the challenge of organizing copies of network traffic to deliver only the necessary data to the security system. This powerful and robust platform revolutionizes data management without compromising resources, offering a scalable solution capable of handling massive traffic - up to several Tbps.

Tailored cyber security solution Cubro offers application filtering for effective traffic management, identifying and filtering known non-threatening sources. The second stage includes TCP flow optimization with intelligent traffic reduction strategies, such as sampling the initial 15 packets of TCP flows.

How does the Cubro Omnia SEC solution work?

• The copied inbound traffic comes from TAPs or an already existing Network Packet Broker (NPB). In the case described, the Omnia120 aggregates various input ports.
• The aggregated traffic is sent to the DPI engine in the Omnic card. The DPI engine extracts metadata for application filtering.
• NPB removes all non-essential traffic, performs Load Balancing if necessary to several Omnic cards, where TCP/IP flow sampling is performed.
• Omnic cards can be installed on any server, including one on which a cyber security solution has been deployed. This is possible because Omnic works in standalone mode and only requires power from the server, no software is needed.
• The sampled traffic is then sent to the server's network card, where cyber security tools do their work.

Benefits of the Omnia SEC solution

Significant traffic reduction: Cubro's innovative solution significantly reduces unnecessary traffic, increasing cost efficiency and optimizing resources.

Effective revenue generation: With intelligent filtering, Cubro's solution not only strengthens cyber security, but also positions itself as a powerful tool for generating revenue in service provider scenarios.

Precision in threat detection: Cubro's multi-stage filtering, including removal of non-threatening traffic, TCP/IP packet flow processing and precise packet sampling, provides targeted and accurate threat detection, enhancing the performance of cyber security tools.

Comprehensive security mapping: Cubro goes beyond IP-based identification by recognizing the importance of correlation. The Omnia SEC solution maps signaling information to cyber-security events in Data Lake, providing service providers with a comprehensive view of potential threats.

Coming into force NIS2 directive requires many entities to implement IT infrastructure security. Cubro's Omnia SEC platform and other network visibility solutions help reduce costs and optimize the performance of cybersecurity tools. Contact us to find out how your company will benefit from Network Visibility