Table of Contents

Licensing

SSG licensing

Bandwidth

Licenses grading of the bandwidth: SSG-6/10/20/40/60/80/100/120/200. Pay attention to the hardware requirements!
Depending on the installation scheme, the following restrictions are assumed:

1. When installing "in line" scheme

Licensing includes ISP traffic asymmetry. Usually, the incoming traffic is three times more than the outgoing one.
For example, Incoming - 6G, Outgoing - 2G. License - SSG-10.

2. When installing using the "mirror" scheme

Features

Licenses grading of the features: Base/BNG/Complete

Options BASE BNG COMPLETE
Bypass :y: :y: :y:
Statistics gathering and analysis on protocols and directions :y: :y: :y:
Traffic prioritization depending on protocols and directions :y: :o: :y:
Common and virtual channel policing :y: :o: :y:
Subscriber notification and marketing campaigns :y: :y: :y:
Subscriber channel policing for IPv4 and IPv6 :n: :y: :y:
Allow Lists and Captive Portal :n: :y: :y:
BNG L3 (IPoE), Dual Stack IPv4/IPv6, Radius with CoA :n: :y: :y:
BNG L2 (PPPoE, DHCP), Dual Stack IPv4/IPv6 :n: :y: :y:
Router with BGP, OSPF, IS-IS support :n: :y: :y:
Carrier-Grade NAT :n: :o: :y:
Ads blocking and replacing :n: :o: :y:
Mini-Firewall for blocking on certain ports :n: :o: :y:
Protection against DOS and DDOS attacks :n: :o: :y:
Regulatory Compliance BASE BNG COMPLETE
Filtering by the blocklisted Internet sites :y: :n: :y:
Lawful interception (LI) :o: :o: :y:
Additional modules and services BASE BNG COMPLETE
URL Classifier Local version :o: :o: :o:
URL Classifier Cloud version :y: :y: :y:
Graphical User Interface Base version :y: :y: :y:
Graphical User Interface Global version :o: :o: :o:
Quality of Experience Module Base version :y: :y: :y:
Quality of Experience Module Standard version :o: :o: :o:
Adding banners to HTTP resorses Subscription
Signatures SDK Subscription
Extended signatures packs Subscription
Reserve License BASE BNG COMPLETE
Stand by License 25% from main License

:y: Yes
:o: Optional
:n: No

License Exceeding

If the license bandwidth parameters are exceeded, the DPI will process the traffic until its capabilities are exhausted. After that, traffic will be skipped without processing. You can limit the bandwidth yourself using channel policing. This is only relevant if the total bandwidth over the ports exceedes the license bandwidth specification.

Reserve SSG license

For the purpose of increasing the fault tolerance of the solution, we recommend backing up the main SSG server. Redundancy schemes and descriptions for BRAS L3 and BRAS L2.
Terms of use of the reserve license:

  1. Use only for backup purposes of the main server
  2. Constant traffic transmission no more than 5% of the license volume, in order to monitor the health of the backup server
  3. Processing of all traffic of the main server only in case of an accident or maintenance of the main server

QoE licensing

Options BASE STANDARD
DPI’s Full NetFlow and ClickStream statistics visualization :y: :y:
Built-in reports of Full NetFlow-based TOP: high RTT, by traffic volume, by number of re-requests, by application protocols, by AS, by subscribers AS, by access switches and aggregation :y: :y:
Built-in ClickStream-based TOP reports: URLs, hosts, subscribers, devices, IP resources :y: :y:
Custom filters for built-in reports, by web resource category, by protocol group, by subscriber :y: :y:
Download reports in .xlsx, .csv, .pdf, .png formats :y: :y:
API support for integration with external systems :y: :y:
Monitoring of aplink quality and cyber threats :y: :y:
Online reports by specific IP, Login :y: :y:
NAT Flow statistics collection, compression, custom filters :o: :y:
DNS Flow statistics collection, compression, custom filters :o: :y:
GTP Flow statistics collection, compression, custom filters, map visualization :o: :y:
Setting triggers and actions on events, DDoS and BotNet detection, notification by email and telegram with a specified periodicity :o: :y:
Special reports :o: :y:

:y: Yes
:o: Optional