BeBroadband Application Awareness Security

BeBroadband Application Awareness Security is a network security service delivered as part of BBT.live's SD-WAN/SASE platform, built on the Rohde & Schwarz R&S®PACE 2 Deep Packet Inspection (DPI) engine.

The service provides application-layer visibility and control by identifying and classifying thousands of applications and network protocols in real time. Classification is achieved through multiple methodologies including signature-based detection, heuristic/machine learning-based detection, and deep packet inspection of packet contents — including encrypted and obfuscated traffic.

Key capabilities include:

• Next-generation firewall (NGFW) enablement with application-aware filtering and blocking
• Zero Trust Network Access (ZTNA) support via Layer 7 application classification
• Detection of obfuscated connections such as DNS tunneling and P2P file sharing
• Analysis of anonymization protocols including TOR and VPN clients
• Profile-based anomaly detection for identifying suspicious protocol usage
• Fine-grained Network Access Control (NAC) limiting access to internet and internal resources
• Metadata extraction (host, location, certificates, version, packet size, timing, jitter, latency, throughput)
• Weekly signature updates for protocols and applications
• WAN optimization through intelligent traffic routing based on application classification

The DPI engine enables real-time threat detection including malicious content, application-specific anomalies, and encrypted application identification. The solution is designed for service providers deploying SD-WAN and SASE architectures.