Deep Packet Inspection vendors comparison

To compare different solutions, we chose one basic and one medium-level device from each vendor, based on sales success and popularity. The top models are affordable only to major operators, who are either already using solutions from a certain manufacturer or order system implementation from an integrator in accordance with technical specifications.

This comparison is only an approximation

Devices made by different Deep packet inspection Vendors use different hardware and software platforms. These characteristics are taken from the official specifications, but they are changeable, with different capacity solutions for every range of products. Other vendors not always install their software systems on standard servers, this way productivity depends on the capacity of the hardware and the number of network interfaces of this vendors.

Each platform is selected for a specific project, and nuances can reduce the choice range to 1-2 solutions. For instance, if a company does not have the right to buy US-made devices, the range of choice is narrowed down to domestic and Chinese manufacturers. The operator may decide to combine DPI and CGNAT systems in one device, SPECTRE DPI 5.0 by Spectre DPI would meet these requirements. And if the network is based on Cisco ASR, there is an opportunity to implement an AVC solution without buying additional equipment.

Basic-level segment

Characteristics Allot NetEnforcer AC500 Ргосега Раскеt Logic 7000 Sandvine PTS 22000 Spectre DPI SPECTRE-6
Platform Own hardware platform, 1U Own hardware platform 1U Own hardware platform 2U Server X86 1U
Bandwidth 400 Mbps 1 Gbps 4 Gbps 6 Gbps
Max sessions 400 К 400 К 2 M 4 М
Max customers 32 000 20 000 500 000 400 000
Network interfaces 2х1GbE 2х1GbE 6x1GbE 6x1GbE / 2x10GbE
DPI functions Traffic Analysis & Management Traffic Analysis & Management Traffic Analysis & Management Traffic Analysis & Management
Price Price information unavailable now Price information unavailable now Price information unavailable now Price information unavailable now

In the basic series, Cisco SCE1000 and Huawei SIG9800-X3 can be classified as too expensive for this segment. The cost of the Huawei platform is due to its high performance, exceeding all other platforms, and Cisco can use its name and experience in the market of network devices.

Russian manufacturers can compete with world-leading companies in terms of the capacity and price of their systems, and we recommend them for use in networks with lower traffic and fewer customers. The advantages of Russian manufacturers compared to international companies include good support, reasonable prices, compatibility of software with most hardware platforms and flexible discount systems.

Medium-level segment

Characteristics Allot Sigma E6 Ргосега Раскеt Logic 9000 Sandvine PTS 24500 Spectre DPI SPECTRE-10 Complete
Platform Own hardware platform, 6U Own hardware platform, 2U Own hardware platform, 4U Server X86, 1U
Bandwidth 64 Gbps 120 Gbps 160 Gbps 80 Gbps
Max sessions 20 M 30 M 36 M 64 M
Max customers 3.2 M 3 M 5 M 8 M
Network interfaces 8х10GbE 16х10GbE 8х10GbE 8х10GbE
DPI functions Traffic Analysis & Management Traffic Analysis & Management Traffic Analysis & Management Traffic Analysis & Management
Price Price information unavailable now Price information unavailable now Price information unavailable now Price information unavailable now

If we compare devices in the medium-level segment, they are almost equal in terms of performance and technical equipment, the most important difference being that Russian solutions are built on standard servers and components. This way, solutions have great advantages in capacity, allowing the addition of network interfaces, memory and processor cores. Each additional module for Allot, Procera, Sandvine is very expensive. Moreover, increasing productivity means having to expand your license.

However, there is a downside. Solutions that work with their own hardware platforms make the end device more reliable and stable, even if it is based on a regular x86 processor. Compare Apple's iMac computers with MacOS and a standard PC with Windows. A closed platform and an operation system optimised for specific hardware makes Apple's PC more productive and stable than a similar solution working on Windows.


Comparing numbers does help us understand what will be profitable in practice. It’s always good if the manufacturer can provide equipment for testing, but the most helpful advice usually comes from experienced people who have already implemented and used the system. Thematic forums on the Internet can be helpful, as well as the company’s technical support specialists. Sales managers will tell you that their device is better than others, but making a list of specific technical questions and asking them on the technical support page will help you get a more complete idea of the product. Sandvine, for example, is new to the Russian market and has very few representatives and cases. The company provides support only through an integrator (which is inconvenient), but regularly updates the platform software and offers flexible configuration.

Procera boasts a convenient PacketLogic Client for configuration and maintenance, and has excellent function visualization. Cisco’s solution may have a bandwidth limit of 15 Gbit/s per service control module, but the Subscriber Manager function does not require additional licenses and works with the basic package.

Spectre DPI regularly update their SPECTRE DPI software to correct errors and add new protocols and signatures. This is good on the one hand, since new signatures allow for more detailed traffic-splitting, but on the other hand, correcting some errors may lead to the emergence of new ones and this system is not 100% stable.

Request free demo