Deepfield
Turn data from your network into your competitive edge
Your IP network is shuffling extreme volumes of packet traffic and generating petabytes of telemetry data. Nokia Deepfield transforms this telemetry into your most powerful asset.
Our unified software platform provides the actionable network intelligence and automated DDoS security you need to deliver flawless service, neutralize security threats, and drive new business growth.
Deepfield is trusted by the world’s leading operators to manage and secure their most critical infrastructure
Deepfield applications and technology
Your network is a goldmine of data. Are you using it?
In the cloud and AI era, network demands have never been greater. Traffic is exploding, encryption is hiding critical service details, and sophisticated cyber threats are on the rise. Managing this complexity with traditional tools is no longer enough. You need to move beyond simple monitoring to achieve true network intelligence.
Nokia Deepfield is the solution. We provide a software-defined, big data analytics platform that gives you an unsiloed, holistic view across your entire IP network. And more. We turn your network into your most valuable source of data, empowering you to see everything, understand its context, and act with speed and precision.
Deepfield: A unified platform for unparalleled insights, security, and growth
Gain actionable network observability
Obtain a holistic, multi-dimensional view of your network, services, and subscribers. Our probe-less architecture gives you more visibility than legacy solutions. We look beyond encrypted traffic and deliver real-time, actionable insights that you can use for data-driven capacity planning, peering optimization to lower costs, and proactive Quality of Experience assurance.
Automate your DDoS security
Deploy AI-driven DDoS security that automatically detects and mitigates attacks in seconds, not hours. Powered by our proprietary Deepfield Secure Genome®, Deepfield Defender provides the industry's most accurate detection, minimizing false positives and protecting your infrastructure, services, and customers from the most advanced threats without human intervention.
Unlock new business opportunities
Leverage deep subscriber intelligence to understand consumption patterns and create new, high-value service tiers for specific user segments like gamers or heavy streamers. Monetize your security investment by using our managed security-ready platform to offer managed DDoS protection as a premium, revenue-generating service to your enterprise customers.
The power behind deep network and services insights
Our novel approach to network intelligence and observability is built on a simple yet powerful three-step process. Our petabyte-scale big data processing engine provides two ways to access its power: through a powerful GUI for visual analysis and interactive queries, and/or using comprehensive APIs for full automation and direct feed into your data science and AI systems.
Ingest: Probe-less telemetry
Deepfield ingests a rich variety of telemetry directly from your existing multi-vendor network infrastructure. We use open standards like IPFIX, BGP, DNS, and gRPC, eliminating the need for expensive and intrusive hardware probes or DPI appliances.
Analyze: Big data engine, enhanced with a unique Deepfield Genome context
Our petabyte-scale data engine processes these massive data sets in real-time. The magic happens when we correlate network data with our proprietary Deepfield Genome—a constantly updated map of the internet that provides critical context on applications, services, and security threats.
Act: Insights and automation
The resulting intelligence is delivered as actionable insights through our intuitive user interface, allowing your teams to explore and visualize data on the fly. For ultimate efficiency, every insight and action can be integrated into your operational workflows via our comprehensive APIs, enabling true network and security automation.
How does Deepfield work?
All our Deepfield applications use a common software platform for data processing. They can be deployed on-premises, within your network, or you can deploy them as cloud-based (using the software-as-a-service model).
The Deepfield platform ingests data from many different sources within your network, starting with essential IP flow-related data sets (any xflow data), BGP and SNMP. These data sets can be further enhanced with DNS information (from DNSflow), along with other router, network and telemetry data sets such as RADIUS/AAA, IPFIX and gRPC.
The Deepfield platform can also ingest custom data sets from other network and operational domains, including network management, SDN control, OSS/BSS, customer care, support and billing. We complement the information about your network infrastructure, services and subscribers with knowledge from our Deepfield Cloud Genome and Deepfield Secure Genome data sets.
By correlating the information from your network with the Genome data sets, Deepfield allows you to obtain unique perspectives across many data sets and data dimensions. This gives you unique and deep insight into your network, peering and transit, services and the ways in which the content is consumed.
Our data processing capabilities extend well into the petabyte range, giving you the scalability and robustness you need.
No DPI probes
Our software-based solutions do not require network appliances, probes or deep packet inspection (DPI) to gain valuable insight from your IP network. They get this insight by collecting and correlating information from the internet and from your network. This approach is well suited to ensuring scalability that extends well into the range of petabytes of data. It results in cost-effective scaling without the need for tedious and expensive network probe or DPI upgrades.
Multi-dimensional insight
We process, correlate, analyze and visualize super-large sets of network- and service-related data. You can get unique insights by creating queries that correlate the data across specific dimensions of data sets, and you can further customize and fine-tune your queries based on specific areas of interest and required levels of detail and granularity.
For example, a query can result in instant output–in the form of sophisticated visualization, formatted data or custom API links–about how internet content is routed from CDN domains across your peering/transit and delivered to your access systems and end-users and subscribers (and how it is split across your subscriber plans).
Detailed internet service delivery chain and security context
Deepfield Cloud Genome tracks, maps and analyzes billions of internet endpoints to provide a dynamic supply map of the internet. It provides full visibility into how applications and content are delivered from all the sources across the internet to your network and across your network to your subscribers.
Deepfield Secure Genome complements the Deepfield Cloud Genome by maintaining a similar database with up-to-date information on potential DDoS threats and secure and insecure (whitelisted/blacklisted) internet sources, destinations and traffic patterns.
Benefits to many teams in your organization
Deepfield applications can bring benefits to many teams in your organization – from network planning, operations, security and marketing to teams focused on big data processing, such as data science and AI teams.
Gain a holistic view of your network, services and subscribers
Deepfield correlates large data sets, infers “hidden” knowledge about your network, services and subscribers, and makes this knowledge available for you to investigate through customized queries and on-the-fly visualizations. This gives you an unsiloed, holistic view of your network, peering and transit, and all CDN flows.
Deepfield can correlate real-time information collected from your network with the Deepfield Genome feeds. This gives you full insight into how your network delivers your services (from CDN servers within your network) or internet-based application and content services to your end systems, users and subscribers.
Secure your network against DDoS threats and attacks
To combat sophisticated DDoS attacks, you need a more intelligent, cost-effective, scalable and adaptable defense strategy. Deepfield Defender, a cornerstone of our Deepfield DDoS security solution, uses real-time analytics with intelligence to monitor, recognize and stop DDoS attacks, and provide 360-degree protection both against inbound (external – from the internet) and outbound (internal – from hijacked or malicious devices within your network) threats and attacks.
Automate your network and operations
The visibility provided by Deepfield solutions brings you previously unattainable insight into your network, services and subscribers. You can use this insight to drive and automate network performance and security. Your automation options range from the creation of automated reports and automatic triggering of notifications that meet certain criteria to further integration with your systems and processes.
Resources
Solution brochure
Related products and solutions
Product
Transform your network operations with actionable network intelligence
Product
Next-gen, big data and AI-driven DDoS detection and mitigation solution
Product
Turn subscriber insights into revenues
Technology
Gain real-time, global insights into internet applications, services, content and security with Nokia Deepfield Cloud and Secure Genome
Related topics
Frequently asked questions
Nokia Deepfield is a unified software platform that transforms IP network telemetry into actionable intelligence and automated DDoS security. It provides real-time visibility into network traffic, services, and subscribers through a probe-less, big-data analytics approach, enabling data-driven operations, cost optimization, and cybersecurity.
Deepfield is purpose-built for telecommunications providers (ISPs, cable operators, fixed, mobile and wholesale operators), internet exchange points (IXPs), cloud builders, hosting providers, and large digital enterprises that operate complex, high-scale IP networks and need comprehensive network intelligence and DDoS protection. We also have a number of customers in healthcare and Research and Education Networks (REN) segments.
Unlike legacy tools that rely on expensive hardware probes or deep packet inspection (DPI) appliances, Deepfield uses a software-defined, probe-less architecture that ingests telemetry from your existing multi-vendor infrastructure using open standards (IPFIX, BGP, DNS, gRPC). Combined with its proprietary Deepfield Genome intelligence, it provides richer visibility—including into encrypted traffic—at a fraction of the cost and complexity.
Yes. Deepfield is vendor-agnostic and integrates with your existing routers, switches, and network infrastructure from any manufacturer. It uses open, standard-based telemetry protocols, so there is no need for proprietary hardware or single-vendor lock-in.
Deepfield delivers measurable cost savings through optimized peering and transit decisions, data-driven capacity planning that avoids over-provisioning, proactive troubleshooting that reduces truck rolls and MTTR, and automated DDoS mitigation that eliminates manual intervention—freeing up engineering resources for strategic initiatives.
The Deepfield platform enables the following applications: Deepfield Cloud Intelligence (network analytics and traffic visibility), Deepfield Subscriber Intelligence (per-subscriber usage insights), Deepfield Defender (AI-driven DDoS detection and automated mitigation), all of them powered by Deepfield Genome (proprietary internet intelligence feeds for both traffic context and security threat data).
Nokia Deepfield is trusted by over 140 service providers and network operators worldwide. Customers have achieved outcomes including significant cost savings through peering optimization, improved OTT video quality-of-experience rankings, automated DDoS mitigation in seconds (vs. hours), and the ability to monetize DDoS protection as a value-added service to their own customers.
Learn more about Deepfield
Blog
Blog
Blog
Blog
Blog
Blog
Case study
Video
Exponential-e discusses the deployment of Nokia Deepfield for DDoS security and network analytics
Latest news
Ready to connect?
Contact us to discover how leading service providers are reducing churn, increasing revenue, making their networks more secure and fostering unparalleled customer loyalty with Nokia Deepfield.
Let us show you how to turn your network into a source of valuable data and your greatest competitive advantage.
Please complete the form below.
The form is loading, please wait...
Thank you. We have received your inquiry. Please continue browsing.