Deepfield
Turn data from your network into your competitive edge
Your IP network is shuffling extreme volumes of packet traffic and generating petabytes of telemetry data. Nokia Deepfield transforms this telemetry into your most powerful asset.
Our unified software platform provides the actionable network intelligence and automated DDoS security you need to deliver flawless service, neutralize security threats, and drive new business growth.
Deepfield is trusted by the world’s leading operators to manage and secure their most critical infrastructure
Deepfield applications and technology
Your network is a goldmine of data. Are you using it?
In the cloud and AI era, network demands have never been greater. Traffic is exploding, encryption is hiding critical service details, and sophisticated cyber threats are on the rise. Managing this complexity with traditional tools is no longer enough. You need to move beyond simple monitoring to achieve true network intelligence.
Nokia Deepfield is the solution. We provide a software-defined, big data analytics platform that gives you an unsiloed, holistic view across your entire IP network. And more. We turn your network into your most valuable source of data, empowering you to see everything, understand its context, and act with speed and precision.
Deepfield: A unified platform for unparalleled insights, security, and growth
Gain actionable network observability
Obtain a holistic, multi-dimensional view of your network, services, and subscribers. Our probe-less architecture gives you more visibility than legacy solutions. We look beyond encrypted traffic and deliver real-time, actionable insights that you can use for data-driven capacity planning, peering optimization to lower costs, and proactive Quality of Experience assurance.
Automate your DDoS security
Deploy AI-driven DDoS security that automatically detects and mitigates attacks in seconds, not hours. Powered by our proprietary Deepfield Secure Genome®, Deepfield Defender provides the industry's most accurate detection, minimizing false positives and protecting your infrastructure, services, and customers from the most advanced threats without human intervention.
Unlock new business opportunities
Leverage deep subscriber intelligence to understand consumption patterns and create new, high-value service tiers for specific user segments like gamers or heavy streamers. Monetize your security investment by using our managed security-ready platform to offer managed DDoS protection as a premium, revenue-generating service to your enterprise customers.
The power behind deep network and services insights
Our novel approach to network intelligence and observability is built on a simple yet powerful three-step process. Our petabyte-scale big data processing engine provides two ways to access its power: through a powerful GUI for visual analysis and interactive queries, and/or using comprehensive APIs for full automation and direct feed into your data science and AI systems.
Ingest: Probe-less telemetry
Deepfield ingests a rich variety of telemetry directly from your existing multi-vendor network infrastructure. We use open standards like IPFIX, BGP, DNS, and gRPC, eliminating the need for expensive and intrusive hardware probes or DPI appliances.
Analyze: Big data engine, enhanced with a unique Deepfield Genome context
Our petabyte-scale data engine processes these massive data sets in real-time. The magic happens when we correlate network data with our proprietary Deepfield Genome—a constantly updated map of the internet that provides critical context on applications, services, and security threats.
Act: Insights and automation
The resulting intelligence is delivered as actionable insights through our intuitive user interface, allowing your teams to explore and visualize data on the fly. For ultimate efficiency, every insight and action can be integrated into your operational workflows via our comprehensive APIs, enabling true network and security automation.
How does Deepfield work?
All our Deepfield applications use a common software platform for data processing. They can be deployed on-premises, within your network, or you can deploy them as cloud-based (using the software-as-a-service model).
The Deepfield platform ingests data from many different sources within your network, starting with essential IP flow-related data sets (any xflow data), BGP and SNMP. These data sets can be further enhanced with DNS information (from DNSflow), along with other router, network and telemetry data sets such as RADIUS/AAA, IPFIX and gRPC.
The Deepfield platform can also ingest custom data sets from other network and operational domains, including network management, SDN control, OSS/BSS, customer care, support and billing. We complement the information about your network infrastructure, services and subscribers with knowledge from our Deepfield Cloud Genome and Deepfield Secure Genome data sets.
By correlating the information from your network with the Genome data sets, Deepfield allows you to obtain unique perspectives across many data sets and data dimensions. This gives you unique and deep insight into your network, peering and transit, services and the ways in which the content is consumed.
Our data processing capabilities extend well into the petabyte range, giving you the scalability and robustness you need.
No DPI probes
Our software-based solutions do not require network appliances, probes or deep packet inspection (DPI) to gain valuable insight from your IP network. They get this insight by collecting and correlating information from the internet and from your network. This approach is well suited to ensuring scalability that extends well into the range of petabytes of data. It results in cost-effective scaling without the need for tedious and expensive network probe or DPI upgrades.
Multi-dimensional insight
We process, correlate, analyze and visualize super-large sets of network- and service-related data. You can get unique insights by creating queries that correlate the data across specific dimensions of data sets, and you can further customize and fine-tune your queries based on specific areas of interest and required levels of detail and granularity.
For example, a query can result in instant output–in the form of sophisticated visualization, formatted data or custom API links–about how internet content is routed from CDN domains across your peering/transit and delivered to your access systems and end-users and subscribers (and how it is split across your subscriber plans).
Detailed internet service delivery chain and security context
Deepfield Cloud Genome tracks, maps and analyzes billions of internet endpoints to provide a dynamic supply map of the internet. It provides full visibility into how applications and content are delivered from all the sources across the internet to your network and across your network to your subscribers.
Deepfield Secure Genome complements the Deepfield Cloud Genome by maintaining a similar database with up-to-date information on potential DDoS threats and secure and insecure (whitelisted/blacklisted) internet sources, destinations and traffic patterns.
Benefits to many teams in your organization
Deepfield applications can bring benefits to many teams in your organization – from network planning, operations, security and marketing to teams focused on big data processing, such as data science and AI teams.
Gain a holistic view of your network, services and subscribers
Deepfield correlates large data sets, infers “hidden” knowledge about your network, services and subscribers, and makes this knowledge available for you to investigate through customized queries and on-the-fly visualizations. This gives you an unsiloed, holistic view of your network, peering and transit, and all CDN flows.
Deepfield can correlate real-time information collected from your network with the Deepfield Genome feeds. This gives you full insight into how your network delivers your services (from CDN servers within your network) or internet-based application and content services to your end systems, users and subscribers.
Secure your network against DDoS threats and attacks
To combat sophisticated DDoS attacks, you need a more intelligent, cost-effective, scalable and adaptable defense strategy. Deepfield Defender, a cornerstone of our Deepfield DDoS security solution, uses real-time analytics with intelligence to monitor, recognize and stop DDoS attacks, and provide 360-degree protection both against inbound (external – from the internet) and outbound (internal – from hijacked or malicious devices within your network) threats and attacks.
Automate your network and operations
The visibility provided by Deepfield solutions brings you previously unattainable insight into your network, services and subscribers. You can use this insight to drive and automate network performance and security. Your automation options range from the creation of automated reports and automatic triggering of notifications that meet certain criteria to further integration with your systems and processes.
Resources
Solution brochure
Related products and solutions
Solution
Protect your network with multi-layered embedded IP network security
Product
Transform your network operations with actionable network intelligence
Product
Next-gen, big data and AI-driven DDoS detection and mitigation solution
Product
Turn subscriber insights into revenues
Technology
Gain real-time, global insights into internet applications, services, content and security with Nokia Deepfield Cloud and Secure Genome
Related topics
Frequently asked questions
Deepfield is a network analytics and security software suite from Nokia that provides real-time, comprehensive insights into large-scale IP networks.
Deepfield uses a big data approach that analyzes network telemetry alongside its proprietary, cloud-based threat intelligence feed, the Deepfield Genome, to provide unparalleled visibility into network, services and subscriber patterns, and to drive next-generation DDoS protection.
The Deepfield portfolio encompasses:
- Deepfield Cloud Intelligence: A network analytics solution that gives operators an end-to-end view of network traffic, including encrypted and over-the-top (OTT) service traffic. This helps with capacity planning, troubleshooting, and optimizing network costs.
- Deepfield Subscriber Intelligence: An application that provides insights into subscriber usage patterns, enabling service providers to create better-targeted service plans and improve customer experience. For example, with Deepfield Cloud and Subscriber Intelligence, service providers can analyze video traffic to help optimize video delivery, troubleshoot quality issues, and potentially create new video service offerings.
- Deepfield Defender: An AI-driven, big data application for detecting and mitigating Distributed Denial-of-Service (DDoS) attacks in real-time. It uses the Deepfield Secure Genome, a global internet security map, to identify and automatically mitigate threats.
- Deepfield Cloud Genome®: The patented, constantly updated map of the global internet that tracks applications, services, and content delivery infrastructure. It is a foundational element that enriches Deepfield's analytic capabilities. This map is complemented by Deepfield Secure Genome®, Deepfield’s “security map of the internet.”
Deepfield is a software-based solution that correlates large data sets from internal network sources (like telemetry, DNS, and BGP routes) with its proprietary Cloud and Secure Genome feeds. Deepfield “sees" through encrypted traffic by using external context and machine learning, rather than resource-intensive deep packet inspection (DPI). Deepfield applications provide actionable, multi-dimensional insights that can be used to automate network performance and security.
By deploying Nokia Deepfield, service providers can gain a competitive advantage by:
- Improving network efficiency: Optimizing network traffic, especially for cloud and OTT services, to reduce wasteful capital and operational expenses.
- Enhancing customer experience: Proactively managing network performance for critical services like video streaming, which can help reduce customer churn.
- Strengthening security: Defending against large-scale DDoS attacks and protecting network infrastructure and customer services.
- Enabling automation: Using data-driven insights to automatically adapt networks to changing traffic demands without manual intervention.
Learn more about Deepfield
Blog
Blog
Blog
Case study
Video
Exponential-e discusses the deployment of Nokia Deepfield for DDoS security and network analytics
Video
Fibrus, UK: Multi-gigabit broadband with analytics and DDoS security by Nokia Deepfield
Video
Live Anti-DDoS Demo by NL-ix: Nokia Deepfield Defender in Action
Video
NL-ix discusses how Nokia Deepfield Defender protects their network from DDoS threats
Latest news
Ready to connect?
Contact us to discover how leading service providers are reducing churn, increasing revenue, making their networks more secure and fostering unparalleled customer loyalty with Nokia Deepfield.
Let us show you how to turn your network into a source of valuable data and your greatest competitive advantage.
Please complete the form below.
The form is loading, please wait...
Thank you. We have received your inquiry. Please continue browsing.