Use Cases
Communications
Service Providers

CONTENTS
INTRODUCTION5USE CASES BY SOLUTION DOMAINNETWORK VISIBILITY

6



7
8
9
11
12
13
14
15
16
17
18
19
20
21
23
24
25
26
27
28
29
31
32
33
34
35
36
37
38
39
40
41
42

43
44
DDoS Security as a Service for Interconnect Carriers 45

2

3

ALLOT SP USE CASESIOT SECURITY

46

IoT Security as a Service
Improve IoT operational efficiencyProtect infrastructure from IoT borne attacks

47
48
49

REGULATORY COMPLIANCE

50

Anti-spam (Blacklist Prevention)
Blacklist URL FilteringUnified Regulatory Compliance
Usage Records Store & Retrieve
Bill Shock Prevention

51
52
53
54
55

INTRODUCTIONINTRODUCTION
Allot Communications is a leading global
provider of innovative network intelligenceand security solutions for service providers,
helping you deliver enhanced value to yourcustomers. Our solutions are deployed globallyfor network and application analytics, traffic
control and shaping, and network-based
security services. Your customers demand
secure and innovative services at a high Qualityof Experience - we help you meet and exceed
their demands.
When visibility is clear and network intelligenceis accurate, you can make smarter, real-timedecisions to truly manage your network,
engage your customers and innovate withnew service offerings. We give you the tools to
optimize and capitalize on every opportunity;
to learn about users and network behaviors; toimprove quality of service and reduce costs;
and to protect your networks and your users
from malicious attacks.
All of this is achieved while deploying newservices more quickly than ever before to bringincreased value to your customers.
The choice may seem simple, but the path iscomplex. An experienced, knowledgeable, andinnovative partner can make all the difference
in meeting customer expectations.

Allot Communications is
your partner for high quality
and secure network services.
The use cases in this booklet present someof the many ways in which Allot works withleading service providers to efficiently manage
their network and deploy innovative and secureservices and reap the rewards.
The Service Provider Use Cases are organized
into the following sevensolution domains:o Network Visibilityo Policy and Charging Control
o Traffic Managemento Security VAS
o DDoS Protection
o IoT Securityo Regulatory Compliance
45

ALLOT SP USE CASES

NETWORK VISIBILITY

NETWORK VISIBILITY

Key Benefits

When you truly know what’s happening on your network, you

oo Gain deeper understandingof customer online activity
and preferences

can make better business decisions. Allot gives you complete
visibility of all application and user traffic in granular detail with
Allot SmartVisibility, which is viewed through built-in dashboards
or custom reports that you create on demand. Optional export ofrich data records enhances the insight you gain from external BI
and big data systems.

NETWORK VISIBILITY

oo Increase ARPU throughbetter targeting of services/
promotions
oo Reduce churn with “stickier”
services

CUSTOMER SEGMENTATION
The ability to identify subscriber interests and usage patterns
enables service providers to introduce targeted promotions andto benefit from other revenue generating opportunities. For
example, one user segment may be characterized as having an

Identify subscriberinterests and usage
patterns
oo Analyze data usage patternsof subscribers, applications,and devices
oo Segment subscribers basedon areas of interest andusage patterns

interest in gadgets, while the subscribers in another segment
are music lovers. By identifying these interest segments along with other attributes such as usage patterns and type ofdevice – the operator can launch effective promotions thatoffer subscribers relevant products and services such as new
or additional devices or personalized service plans. Subscriber
segmentation also offers abundant opportunities for revenue
generation from advertising.

oo Target promotions and optin adverts tailored to eachsegment
oo Leverage segmentation
profiles to attract advertisersand other revenue
opportunities

Powered by
Allot Service Gateway

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFIC

oo NetXplorer
oo ClearSee

ANALYTICS
TOOLSoo Subscriber Management
Platform

Departments

SMART
DATA
SOURCEANALYSIS
Allot ClearSee
Network Analytic

STORAGE
Allot Data
Warehouse

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Bi
front-end

Trends, outllers, thresholds

SYSLOG

Customized by Allot data science service
Other
data sources

Smart Data Sets
(CSV/SQL)

ActionCVM, CEM big data
projects use casevisabillity SIEM

Allot DWH of joined
aggregated data

Marketing/Engineering/Operations/Security

STREAMINGDATARECORDSPROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator

Regulatorycompliance, Billing

Extract, transform,load (ETL)

Technology
Fixed, Mobile, Converged
6

STREAMINGDATARECORDSCOLLECTION
Allot Service
Gateaway7

ALLOT SP USE CASES

NETWORK VISIBILITY

NETWORK VISIBILITY

OPTIMIZE CUSTOMER CARE
Every interaction with your customer is critical. The right kind of

Key Benefits

Key Benefits

oo Reduce trial and error
in resolving customer
complaints

oo Reduce trial and error
in resolving customer
complaints

oo Improve your Customer
Care service

oo Improve your Customer
Care service

oo Enhance your brand image

oo Enhance your brand image

usage and activity analytics can assist Customer Care personnel
in resolving customer issues. For example, customers may
complain that their handset battery requires frequent recharging
and is running out of juice after only a few hours of use. Whilethe usual suspect may be the battery, the customer’s usage
history points to a recent download of one or more bandwidthintensive applications as well as frequent use of that application.
The history may also show that the downloaded application
works better with a later version of the device’s operating
system. Armed with this usage history and analysis, support
personnel could recommend using an alternative applicationthat is easier on the battery, upgrading the device OS, or

NETWORK VISIBILITYIDENTIFY POTENTIAL CHURNERS
It is estimated that it costs 7 times as much to win new
customers as to keep existing ones. Using advanced analytics

Customer Care
Optimization in Action

Identify Potential
Churners in Action

oo Customer contacts Call
Center with complaint

oo Customer contacts Call
Center with complaint

oo Call Center rep consults
customer profile and recent
activity

oo Call Center rep consults
customer profile and recent
activityoo Profile analysis assists in
pinpointing the problem

oo Profile analysis assists in
pinpointing the problem

oo Call Center resolves the
problem faster and betteroo Call Center resolves the
problem faster and better

Powered by
Allot Service Gateway

Powered by
Allot Service Gateway

oo NetXplorer

oo NetXplorer

oo ClearSee

oo ClearSee

oo Subscriber Management
Platformoo Subscriber Management
Platform

capabilities, it is possible to craft reports that identify high risk
churners based on a combination of activities such as reduced
activity, visits to competitor sites and poor QoE. One can thenreach out to such customers with attractive, personalized offersand care to win back their loyalty

upgrading the battery, or all three options. With so many factors
affecting data service, customers value a service provider who isknowledgeable and can resolve problems quickly.

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFICGRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFIC

Departments
ANALYTICS
TOOLS

SMART
DATA
SOURCEANALYSIS
Allot ClearSee
Network Analytic

STORAGE
Allot Data
Warehouse

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Bi
front-end

SYSLOG

Customized by Allot data science service
Other
data sources

Departments

Trends, outllers, thresholds

Smart Data Sets
(CSV/SQL)

ActionCVM, CEM big data
projects use casevisabillity SIEM

Marketing/Engineering/Operations/Security

Technology

Marketing/Engineering/Operations/Security

Technology

ANALYTICS
TOOLS

SMART
DATA
SOURCEANALYSIS
Allot ClearSee
Network Analytic

STORAGE
Allot Data
Warehouse

Granular and diverse xDRs (CSV)

Allot DataMediator

8

COLLECTION
Allot Service
Gateaway

SYSLOG

Customized by Allot data science service

Regulatorycompliance, Billing

Mobile, Converged
STREAMINGDATARECORDS

Smart Data Sets
(CSV/SQL)PROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator

Extract, transform,load (ETL)

STREAMINGDATARECORDS

Trends, outllers, thresholds

ActionCVM, CEM big data
projects use casevisabillity SIEM

Allot DWH of joined
aggregated data

Fixed, Mobile, Converged

PROCESSING

Bi
front-end

Otherdata sources

Allot DWH of joined
aggregated data

STREAMINGDATARECORDS

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Regulatorycompliance, Billing

Extract, transform,load (ETL)

STREAMINGDATARECORDSCOLLECTION
Allot Service
Gateaway9

ALLOT SP USE CASES

NETWORK VISIBILITY

Key Benefits
oo Understand technology
utilization trends
oo Plan for new technology
oo Migrate on time/on budget

NETWORK VISIBILITYTECHNOLOGY VERSION
AWARENESS

Technology Version
Awareness in Action

Keeping up with new technologies can be quite costly. With

oo Analyze trends intechnology utilization

may be tempted to overspend early in the curve - earlier

oo Create well-founded
migration plan

trends within their customer base, they can plan "just in time"

oo Implement efficiently

constant pressure to stay ahead of changes, service providers
than they need to. By gaining clear visibility into actual usage
migrations and keep CAPEX and OPEX as low as possible

Powered by
Allot Service Gateway
oo NetXplorer
oo ClearSee
oo Subscriber Management
Platform

Departments
Marketing/Engineering/Operations/Security

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFIC

Technology
Fixed, Mobile, Converged

ANALYTICS
TOOLS

SMART
DATA
SOURCEANALYSIS
Allot ClearSee
Network Analytic

STORAGE
Allot Data
Warehouse

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Bi
front-end

Trends, outllers, thresholds

SYSLOG

Customized by Allot data science service
Other
data sources

Smart Data Sets
(CSV/SQL)

ActionCVM, CEM big data
projects use casevisabillity SIEM

Allot DWH of joined
aggregated data

STREAMINGDATARECORDSPROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator

Regulatorycompliance, Billing

Extract, transform,load (ETL)

STREAMINGDATARECORDS

10COLLECTION
Allot Service
Gateaway11

ALLOT SP USE CASES

NETWORK VISIBILITY

NETWORK VISIBILITY

NETWORK RESOURCE PLANNING
Network planning relies on accurate and meaningful information
regarding congestion episodes on the network, why they occur,and their effect on subscriber Quality of Experience (QoE)..

Key Benefits

Key Benefits

oo Pinpoint the causes of
network congestion

oo Gain better understandingof NW performance

oo Understand usage
trends and better predict
congestionoo Improve user satisfaction

oo Save on resource CAPEXand OPEX through accurate
planning

For example, real-time analytics can show which subscribers,
applications and devices are consuming the bandwidth in a
temporarily congested cell, while historical analysis can beused to identify the usage patterns that make a cell chronicallycongested. The effects of congestion may be felt keenly byvideo consumers who experience more stalls, stutters and longload times. Analyzing QoE per subscriber, application and device
in congested cells can help operators identify problem areas andbetter plan around them. For example, expedited forwarding
and video optimization may alleviate most of the QoE problems,
rather than bandwidth expansion.

Network Resource
Planning in Action
oo Collect and warehouse
real-time session and usage
data per sub, application,
device, celloo Identify congestion
episodes and their causes
oo Analyze the effects ofcongestion on application
QoE and SLA deviations
oo Evaluate solutions to manage
and reduce congestion
versus bandwidth expansion

Powered by
Allot Service Gateway
oo NetXplorer

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFICANALYTICS
TOOLS

SMART
DATA
SOURCEANALYSIS
Allot ClearSee
Network Analytic

STORAGE
Allot Data
Warehouse

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Bi
front-end

Trends, outllers, thresholds

SYSLOG

Smart Data Sets
(CSV/SQL)

CVM, CEM big data
projects use casevisabillity SIEM

Allot DWH of joined
aggregated data

STREAMINGDATARECORDSPROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator
Extract, transform,load (ETL)

STREAMINGDATARECORDS

12COLLECTION
Allot Service
Gateaway

oo Reduce churnTo ensure high customer QoE, one must measure andNetwork/Web QoE
in Action
oo Analyze network
performance and traffic
bottlenecks
oo Implement pin-pointed
network enhancements

understand in detail the factors that influence performanceissues related to browsing and video consumption. By analyzing
in detail where, when and why congestion is impacting user
experience, service providers can optimize network expansion
to exactly fit current and projected needs—avoiding unnecessary
spending, saving both CAPEX and OPEX.

oo Improve user QoE

Powered by
Allot Service Gateway
oo NetXplorer
oo ClearSee
oo Subscriber Management
Platform

Departments
Marketing/Engineering/Operations/Security

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFIC

oo ClearSee
oo Subscriber Management
Platform

CUSTOMER QoETechnology

ANALYTICS
TOOLS

Fixed, Mobile, Converged
Customized by Allot data science service

Other
data sources

ActionNETWORK VISIBILITY

Departments

SMART
DATA
SOURCE

Marketing/Engineering/Operations/Security

Allot ClearSee
Network Analytic

STORAGE
Allot Data
WarehouseBifront-end

Trends, outllers, thresholds

SYSLOG

Customized by Allot data science service
Other
data sources

Smart Data Sets
(CSV/SQL)PROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator

Technology
Fixed, Mobile, Converged

Dashboard
Actionable insights
Custom reports
Real-Time monitor

ActionCVM, CEM big data
projects use casevisabillity SIEM

Allot DWH of joined
aggregated data

STREAMINGDATARECORDS

Regulatorycompliance, Billing

ANALYSIS

Regulatorycompliance, Billing

Extract, transform,load (ETL)

STREAMINGDATARECORDSCOLLECTION
Allot Service
Gateaway13

ALLOT SP USE CASES

NETWORK VISIBILITY

NETWORK VISIBILITY

PREPAID BEHAVIOR ANALYSISKey Benefits

Key Benefits

oo Elevate your relationshipwith prepaid customers

oo Identify fraudulent activity

oo Reduce the risk of prepaid
churnPrepaid customers comprise a significant segment of users in

oo Increase opportunities forrevenue generation

mobile data networks. However, their activity and preferences
are mostly unknown. This limited relationship makes it easier forthem to churn. Prepaid Behavior Analysis allows service providers
to change the nature of the relationship by providing valuable
insight into the online activity of prepaid customers. Usage trends
regarding popular applications, time-of-day patterns, device, andother parameters help service providers identify different profiles
within the prepaid community so they can target the rightkind of value to this important segment. For example, behavior
analysis can be used to incentivize users of bandwidth-intensive
applications to increase the amount of their regular top-up, ormove up to a higher-tier prepaid package. It can also assist in
targeting relevant ad campaigns to prepaid customers.

Prepaid Behavior Analysis
in Action
oo Track prepaid usage perapplication, volume, anddeviceoo Combine usage data withlocation, point of sale, andother known parameters
oo Analyze prepaid behavior
and segment accordingly
oo Prepaid Behavior Analysis
in Action Target prepaid
segments with more
appealing packages

Powered by
Allot Service Gateway
oo NetXplorer
oo ClearSee

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFICANALYTICSTOOLSANALYSIS
Allot ClearSee
Network Analytic

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Bi
front-endoo Subscriber Management
Platformoo Close security loopholes
oo Assure revenue per usage

Revenue Impact Analysis
and Fraud Detection in
ActionNETWORK VISIBILITY

REVENUE IMPACT ANALYSIS ANDFRAUD DETECTION
It has been estimated that service providers lose 10-20% of
potential revenue to fraudulent activity that bypasses usage

oo Establish baseline
application behavior

quotas and avoids payment for data consumption. This clearly

oo Monitor and detect
anomalous behavior
patterns

and unnecessary network expansion if unchecked. By identifying

oo Alert service providers to
implement mitigation

impacts the bottom line and may also contribute to congestion
these activities and taking steps to block them, service providers
can ensure they are properly compensated for all network usage.

Powered by
Allot Service Gateway
oo NetXplorer
oo ClearSee
oo Subscriber Management
Platform

Departments
Marketing/Engineering/Operations/Security

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFIC

Trends, outllers, thresholds

SYSLOG

ActionDepartments

Technology

ANALYTICSTOOLSANALYSIS
Allot ClearSee
Network Analytic

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Bi
front-end

Trends, outllers, thresholds

SYSLOG

ActionFixed, Mobile, Converged
SMART
DATA
SOURCESTORAGE
Allot Data
Warehouse

Customized by Allot data science service
Other
data sources

Smart Data Sets
(CSV/SQL)

CVM, CEM big data
projects use casevisabillity SIEM

Marketing/Engineering/Operations/Security

SMART
DATA
SOURCESTORAGE
Allot Data
Warehouse

Customized by Allot data science service
Other
data sources

Allot DWH of joined
aggregated data

STREAMINGDATARECORDSPROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator
Extract, transform,load (ETL)

STREAMINGDATARECORDS

14

COLLECTION
Allot Service
Gateaway

Smart Data Sets
(CSV/SQL)

CVM, CEM big data
projects use casevisabillity SIEM

Allot DWH of joined
aggregated data

Regulatorycompliance, BillingTechnology

STREAMINGDATARECORDSPROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator

Regulatorycompliance, Billing

Extract, transform,load (ETL)

Mobile, Converged
STREAMINGDATARECORDSCOLLECTION
Allot Service
Gateaway15

ALLOT SP USE CASES

NETWORK VISIBILITY

NETWORK VISIBILITY

SECURITY ANALYSISKey Benefits

Key Benefits

oo Increase uptake of
security VAS

oo Understand how each planis usedoo Increase ARPU

oo Update plans and offers

oo Gain positive publicity

oo Increase ARPU thru better
package fit

Studies indicate that many mass market subscribers want theirservice provider to solve their connectivity security issues on theirbehalf. By correlating users who have experienced security issues
with demographics of customers that pay for security Value

NETWORK VISIBILITYSERVICE PLAN EVALUATION
Tiered plans and service bundles do not always get utilized

Security Analysis in
ActionAdded Services, SPs can target specific value-added security

oo Analyze customer security
issuesservices to likely candidate customers

oo Identify likely needs
oo Promote security VAS

as expected by operators. Granular visibility into correlation

Service Plan Evaluation in
Actionbetween user demographics, device types and package

oo Analyze response todifferent plans and updates

match customer segments, thereby increasing network usage

utilization enable the service provider to fine-tune offerings toand customer ARPU.

oo Target users who are likely
to upgrade their plansoo Promote new plans

Powered by
Allot Service Gateway
oo NetXplorer
oo ClearSee
oo Subscriber Management
Platform

Powered by
Allot Service Gateway
oo NetXplorer
oo ClearSee
oo Subscriber Management
Platform

Departments
Marketing/Engineering/Operations/Security

Departments
Marketing/Engineering/Operations/Security

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFICANALYTICS
TOOLS

SMART
DATA
SOURCEANALYSIS
Allot ClearSee
Network Analytic

STORAGE
Allot Data
Warehouse

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Bi
front-end

SYSLOG

Technology

ActionANALYTICS
TOOLS

Fixed, Mobile, Converged
Customized by Allot data science service

Other
data sources

Mobile, Converged

Trends, outllers, thresholds

GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFIC

Technology

Smart Data Sets
(CSV/SQL)

CVM, CEM big data
projects use casevisabillity SIEM

SMART
DATA
SOURCEANALYSIS
Allot ClearSee
Network Analytic

STORAGE
Allot Data
Warehouse

PROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator

16

COLLECTION
Allot Service
Gateaway

Trends, outllers, thresholds

SYSLOG

Customized by Allot data science service

Smart Data Sets
(CSV/SQL)

ActionCVM, CEM big data
projects use casevisabillity SIEM

Allot DWH of joined
aggregated data

Regulatorycompliance, Billing

STREAMINGDATARECORDSPROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator

Extract, transform,load (ETL)

STREAMINGDATARECORDSBi
front-end

Otherdata sources

Allot DWH of joined
aggregated data

STREAMINGDATARECORDS

Dashboard
Actionable insights
Custom reports
Real-Time monitor

Regulatorycompliance, Billing

Extract, transform,load (ETL)

STREAMINGDATARECORDSCOLLECTION
Allot Service
Gateaway17

ALLOT SP USE CASESPOLICY CONTROL & CHARGING (PCC)
Maximize customer lifetime value by leveraging application-based
and usage-based data plans that cater to the unique and dynamic
needs of prepaid, postpaid, business, and IoT customers. Allot's
Smart PCC solutions integrate seamlessly with authentication,

POLICY CONTROL & CHARGINGKey Benefits
oo Increase ARPU
oo Enhance customer choice
and increase loyalty

APPLICATION-BASED CHARGING

oo Differentiate your service
offering

The ability to identify applications at Layer-7 allows operators toprovisioning and charging systems to assure fast service roll-out
and time-to-revenue.

POLICY CONTROL & CHARGING

differentiate their offering with a range of unique service plansoo Application-based

Charging in Action

oo Customer opts-in to “Social
Mingler” planoo Plan based on data cap
with unlimited use of social
networking apps
oo Exclude Facebook, Twitter,
WhatsApp, Instagram,
LinkedIn from data cap

based on gaming, social networking, streaming video, basic email,and other popular applications. For example, operators may
identify many customers who are “Social Minglers” meaning they
are heavy users of social networks. This segment can be offeredzero-rating on popular social networking apps so that usage is notcounted against their data cap. Similarly, frequent gamers would
be attracted to a plan that offers guaranteed quality of service forWorld of Warcraft, Call of Duty, and other interactive games.

oo Send monthly usage reportin customer bill indicating“free” data volume used

Powered by
Allot Service Gateway
oo NetXplorer
oo ClearSee
oo Subscriber Management
Platform

DIFFERENTIATED OFFERINGS AND PERSONALIZEDCUSTOMER EXPERIENCE
Subscriber Management

Departments
AAA

LDAP

MME

Self-Care

DHCP

Customer Portal

Marketing/Engineering/Operations/Security

Technology

Charging

Customer App

Sy

OCS

OFCS

Gy/Gz

Data Plane
PCRF
S/PGW

Mobile, Converged
Mobile5d Gx

eNodeBSGi
SERVICE GATEWAY
BRAS
VAS

FTTH/FTTB/DSL

18

EPC/GILAN

Allot GiLAN
physical/virtual functions

19

ALLOT SP USE CASESPOLICY CONTROL & CHARGINGPOLICY CONTROL & CHARGINGHTTP HEADER ENRICHMENT

Key Benefits

Key Benefits

oo Increase ARPU

oo Create new sources ofrevenue together with OTT
content providers

oo Improve User Experience/increase loyalty
oo Strengthen OTT
partnerships

Service providers seek ways to leverage customer information to

POLICY CONTROL & CHARGINGOTT CONTENT BUNDLING

oo Differentiate your service
offering
oo Reduce churnimprove and personalize their online experiences. By forwarding

Over-the-top content is an integral part of the digital lifestyle.
One of the ways service providers can capitalize on thisHTTP Header Enrichment
in Action

anonymized customer information to OTT and Content provider
web sites, these partners can in turn provide personalized
responses/content that improves the end user experience,

HTTP Header Enrichment
in Action

oo Offer personalized services

driving improved business models for the Service Provider.

oo Partner with OTT andContent Providers
oo Enrich HTTP headers ofcustomer requests
oo Deliver personalized
servicesPowered by
Allot Service Gateway

oo Service bundles withvarious combinations of
OTT content/services
oo Provision QoS, volume cap,and charging rules for eachbundletiered bundles of popular OTT content and services. For example,
service providers can partner with local content providers tobundle their music, games, movies, video, and social networking
applications into a variety of tiered packages aimed at different
customer segments. Bundled applications may be loaded onto
smartphones at the point of sale, together with usage caps,
overage policy, and unified billing by the service provider for pay-oo Track and share usage
statistics for targeted
advertisingfor-use content.

oo Provide unified billing for all
servicesto ensure great QoE. It may also offer options for targeted

The bundle may include content caching or video optimization
advertising based on in-depth analysis of subscriber behavior
and bundle popularity. With so many kinds of local and global

oo NetXplorer
oo Subscriber Management
Platform

phenomenon is by generating and sharing revenue throughPowered by
Allot Service Gateway

content coming online all the time, service providers haveunlimited opportunity to launch new business ventures with OTT
providers and share the revenue.

oo NetXplorer

Departments
DIFFERENTIATED OFFERINGS AND PERSONALIZEDCUSTOMER EXPERIENCE
Subscriber Management

Marketing/Operations

Self-Care

Charging

Technology
AAA

LDAP

MME

DHCP

Customer Portal

Customer App

Sy

OCS

Gy/Gz

PCRF
S/PGW

Subscriber Management

OFCS

AAA

Mobile, Converged

LDAP

SGi

MME

Self-Care

DHCP

OCS

OFCS

Gy/Gz

PCRF
S/PGW
Mobile5d Gx

eNodeBSGi
SERVICE GATEWAY
BRAS

VAS

20

Customer App

Data Plane

BRAS

EPC/GILAN

Customer Portal

Sy

SERVICE GATEWAY

FTTH/FTTB/DSL

Charging

Marketing/Operations

Mobile, Converged

5d Gx

eNodeB

DIFFERENTIATED OFFERINGS AND PERSONALIZEDCUSTOMER EXPERIENCE

Departments

Technology

Data Plane

Mobileoo Subscriber Management
Platform

VAS
FTTH/FTTB/DSL

Allot GiLAN
physical/virtual functions

EPC/GILAN

Allot GiLAN
physical/virtual functions

21

ALLOT SP USE CASESPOLICY CONTROL & CHARGINGKey Benefits
oo Differentiate your offering
to high-end customers
oo Expand revenue-sharebusiness

POLICY CONTROL & CHARGINGOTT PREMIUM CONTENT

oo Increase ARPU

While most over-the-top content is free, many content providers
also offer premium Internet content and services for a fee.

HTTP Header Enrichment
in Action

Service providers can capitalize on this growing phenomenon by

oo Create tiered packages fordelivery and charging ofpremium OTT content/
services

experience and to track and analyze OTT usage. For example,

oo Share revenue with OTT
providers from newcustomer acquisitions
oo Track and share usage
statistics for targeted
advertisingleveraging their unique ability to enable access, shape the user
service providers can help popular music-, video-, or TV-ondemand providers to expand their pay-for-use business bybundling the OTT service together with smartphone acquisition,
high-speed access, guaranteed QoE, and unified billing in a
premium package. The premium-content relationship may sharerevenue and also offer options for targeted advertising based on
analysis of subscriber behavior and application usage.

oo Provide unified billing for all
servicesPowered by
Allot Service Gateway
oo NetXplorer
oo Subscriber Management
Platform

DIFFERENTIATED OFFERINGS AND PERSONALIZEDCUSTOMER EXPERIENCE
Subscriber Management

Departments
AAA

LDAP

MME

Self-Care

DHCP

Charging

Customer Portal

Customer App

OCS

OFCS

Marketing/Operations
Sy

Technology

Gy/Gz

Data Plane
PCRF

Mobile, Converged

S/PGW
Mobile5d Gx

eNodeBSGi
SERVICE GATEWAY
BRAS
VAS

FTTH/FTTB/DSL

22

EPC/GILAN

Allot GiLAN
physical/virtual functions

23

ALLOT SP USE CASESPOLICY CONTROL & CHARGINGPOLICY CONTROL & CHARGINGSERVICE TIERING
Data service providers use service tiering to tailor competitive

Key Benefits

Key Benefits

oo Increase revenue and upsell
opportunities

oo Increase ARPU throughoptional tethering plansoo Differentiate your service
offering

oo Increase customer
satisfaction

oo Enhance customer
satisfaction

oo Block illegal tethering

POLICY CONTROL & CHARGINGTETHERING DETECTION
In many geographies, mobile broadband is the most accessible

service plans to specific market segments and subscriber

broadband option available and some customers exploit

preferences. Service plans may be tiered according to different

Service Tiering in Action

speeds (Mbps, Gbps), QoS, usage allowances, Happy Hours, fairuse provisions, application-based SLAs and more. For example,

oo Create policy rules for eachtiered service plana basic tier could offer high speed but low monthly data cap,
while a premium tier offers high speed, unlimited data volume,

oo Assign customers to thetiered plan of their choiceand expedited forwarding for Streaming Video and Gaming

oo Automatically enforce tierspeed, QoS, data cap, etc.
on subscriber traffic in realtime

applications. Tiered plans can be rolled out for specific devices
as well. In this way, operators can target each customer with theright service plan at the right price.

oo Automatically enforce tiercharging rules and createcharging records

Service Tiering in Action
oo Offer premium plans that
include tethering

tethering to enable secondary users to ride for free on their dataplans. Tethering is difficult to detect but if detected, it can beoffered as an upsell and blocked when it has not been paid for.

oo Detect tethering in realtime
oo Apply premium charging
and block unpaid fortethering attempts

Powered by
Allot Service Gateway
oo NetXplorer

Powered by
Allot Service Gateway
oo NetXplorer
oo Subscriber Management
Platformoo Subscriber Management
Platform

Departments
Marketing/Operations

DIFFERENTIATED OFFERINGS AND PERSONALIZEDCUSTOMER EXPERIENCE
Subscriber Management

AAA

LDAP

MME

DIFFERENTIATED OFFERINGS AND PERSONALIZEDCUSTOMER EXPERIENCE

Self-Care

DHCP

Charging

Customer Portal

Customer App

Sy

OCS

OFCS

Departments

Technology

Marketing/Operations

Mobile, Converged

Subscriber Management

AAA

LDAP

MME

Self-Care

DHCP

Charging

Customer Portal

Gy/Gz

Customer App

Sy

OCS

OFCS

Gy/Gz

Technology
Data Plane

Data Plane

Mobile, Converged

PCRF
S/PGW
Mobile

PCRF
S/PGW

5d Gx

eNodeB

SGi

MobileeNodeBSGi

SERVICE GATEWAYSERVICE GATEWAY

BRAS

BRAS
VAS

FTTH/FTTB/DSL

24

EPC/GILAN

5d Gx

VAS
FTTH/FTTB/DSL

Allot GiLAN
physical/virtual functions

EPC/GILAN

Allot GiLAN
physical/virtual functions

25

ALLOT SP USE CASESPOLICY CONTROL & CHARGINGPOLICY CONTROL & CHARGINGTURBO BOOST

Key Benefits

Key Benefits

oo Increase bandwidth upsell
opportunities

oo Increase ARPU

oo Increase incremental ARPU
through opt-in services
oo Enhance your brand withservices for the Digital
Lifestyle

Broadband subscribers typically sign up for the data plan thatbest suits their digital lifestyle. But there are always thosemoments when an extra boost of bandwidth is desired. For
example, when snapping and sending photos from a sports

Turbo Boost in Action

venue with thousands of people doing the same, the data

oo Operator detects QoE
status and sends SMS
offering turbo boost

experience could be poor. Likewise, when streaming a full movie
or downloading large files, real-time bandwidth-on-demand(BoD) comes in handy. The ability to obtain an on-demand speed

oo Subscriber selects BoD
option via SMS or fromoperator portal

upgrade for a limited duration is something many subscribers
want and are willing to pay for.

oo BoD policy is applied for the
specified time period
oo Restore regular service plan
when BoD time expires andsend charge notification

Powered by
Allot Service Gateway

oo Close the gap between
network usage andrevenues
oo Promote fair use andpredictable utilization

POLICY CONTROL & CHARGING

VOLUME-BASED CHARGING
Volume-based charging translates increased usage into
proportional revenue growth for data service providers. It also

Volume-based Charging
in Action

helps them better regulate network utilization. For example,
operators can offer a choice of data plans with megabyte orgigabyte caps priced according to the volume of data traffic

oo Meter subscriber usage inreal-timeallowed during a one-month period. Subscribers gain complete

oo Notify when usage
approaches volume limit
and redirect to top-up
portalthe ability to control monthly costs. Further monetization

oo Customer may buy extra
volume, upgrade service
plan, or agree to overagefeedata cap for a fee, or to upgrade to higher usage plan. Volume-transparency regarding their actual data consumption plus
opportunities open up when customers who are approaching
their cap limit are notified and given the option to “top-up” theirbased charging also promotes fair use, as heavy users are nolonger subsidized at the expense of others.

oo Data cap automatically
reset at end of billing period

Powered by
Allot Service Gateway

oo NetXplorer
oo Subscriber Management
Platform

DIFFERENTIATED OFFERINGS AND PERSONALIZEDCUSTOMER EXPERIENCE
Subscriber Management

AAA

LDAP

MME

Self-Care

DHCP

Charging

Customer Portal

Customer App

OCS

Departments

OFCS

oo NetXplorer
oo Subscriber Management
Platform

DIFFERENTIATED OFFERINGS AND PERSONALIZEDCUSTOMER EXPERIENCE
Subscriber Management

Departments

AAA

LDAP

MME

Self-Care

DHCP

Charging

Customer Portal

Customer App

OCS

OFCS

Marketing/Operations
Sy

Technology

Data Plane
PCRF
S/PGW
MobileMarketing/Operations

Gy/Gz

PCRF
S/PGW

Mobile, Converged
SGi

MobileSGi
SERVICE GATEWAY

BRAS

BRAS
VAS

26

EPC/GILAN

5d Gx

eNodeBSERVICE GATEWAY

FTTH/FTTB/DSL

Gy/Gz

Data Plane

Mobile, Converged

5d Gx

eNodeB

Technology

Sy

VAS
FTTH/FTTB/DSL

Allot GiLAN
physical/virtual functions

EPC/GILAN

Allot GiLAN
physical/virtual functions

27

ALLOT SP USE CASES

TRAFFIC MANAGEMENTTRAFFIC MANAGEMENT

Key Benefits

Accurate traffic classification is a must to ensure Quality of Service

oo Optimize utilization ofexisting infrastructure

in an era of encrypted traffic. Your brand is built on the QoS yourcustomers experience every time they use the network. Allot's

oo Improve customer
experience

SmartTraffic QoE management enables intelligent and automatedoo Defer CAPEX expansion

TRAFFIC MANAGEMENT

QoE-BASED CONGESTIONMANAGEMENT

control of subscriber QoE at every point in your network. As aresult, you save significantly on infrastructure costs, while
delivering your network’s best QoE – every time, every place.

QoE-based Congestion
Management in Action
oo Analyze network segment
congestion
oo Detect congested segments
impacting QoE
oo Implement prioritizedcongestion management
policyAllot combines real-time monitoring of critical QoE indicatorswith policy-driven congestion control to maximize the qualityof experience your deployed network can deliver at any given
moment. When QoE indicators drop, our solution automaticallyshapes consumption while re-allocating available bandwidth
according to your QoS or service plan policy. When thecongestion is alleviated, the changes are rolled back to restore
pre-configured settings

oo Monitor and restore default
policies when resolved

Powered by
Allot Service Gateway
oo NetXplorer

Departments
Engineering/Operations/Marketing

ENSURE QoS THROUGH TRAFFIC CLASSIFICATIONAND OPTIMIZATION

Technology

Allot ClearSee
Analytics

Allot NetXplorer
Management

Allot
SMP/CDC

Fixed, Mobile, Converged
BW info update

Automatic setup(line templates)

Max BW assessment*.CSV Records

Sub info update

ACK

Config sync

Real-time datacollection
per cell

SYN
ACK

Real-time
feedback loop

Subscriber

RNC

AC
K

K
AC
SYN

GGSN
RNC

Gi
Allot
service gateway

Subscriber

28

Monitored
cellsInternal RTT measure
CDC Congestion detection & control module

29

ALLOT SP USE CASES

TRAFFIC MANAGEMENT

Key Benefits
oo Improve QoE for priority
applications
oo Improve resource utilization,
save on CAPEX

TRAFFIC MANAGEMENTLAYER 7 STEERING FOR
VAS INTEGRATION

oo Save on OPEX by retiringother, more labor intensive,
steering vendors
oo Compliant with any VAS
type; proxy, nonproxy,transparent, nontransparent

As service providers struggle to differentiate their services andimprove their bottom line, optimizing resource utilization andimproving customer QoE are increasingly important. The ability,
for example, to automatically steer all incoming video traffic to a

Layer 7 Steering for VAS
Integration in Action

video optimization subsystem allows CSPs to deliver higher QoE
at optimal network utilization and operational efficiency. Superior
visibility and granular steering means only the traffic that needs

oo Define Layer 7 steering
policies
oo Steer appropriate
application traffic to oraway from VAS delivery
infrastructure

to be steered will be steered, thereby minimizing the required
VAS infrastructure and saving additional CAPEX.

oo Optimize network andapplication performance

Powered by Allot Service
Gatewayoo NetXplorer

Departments
Engineering/Operations/MarketingTechnology

ENSURE QOS THROUGH TRAFFIC CLASSIFICATION AND
OPTIMIZATION
A

B

Fixed, Mobile, Converged
VAS

30

31

ALLOT SP USE CASES

TRAFFIC MANAGEMENTTRAFFIC MANAGEMENTFAIR USE MANAGEMENT

Key Benefits

Key Benefits

oo Reduce network congestion

oo Differentiate Enterpriseoffering

oo Ensure service availability/
delivery even when network
is congested
oo Enhance customer
satisfaction and reduce
churn

Whether providing fixed or mobile connectivity, broadband
service providers must constantly struggle to deliver fair andis to be discriminated against, yet at the same time, none are to
be allowed to abuse shared network resources at the expenseof others. Fair use management ensures that no individual
subscriber disrupts the service provided to others. It does so
by managing throughput and subscriber QoE on the basis ofcongestion thresholds across the entire network.

oo Increase Revenues

Fair Use Managementin Action

Multi-tenant Solution for
Visibility & Control forEnterprise Customers in
Actionoo Congestion thresholdautomatically triggers fairuse policy enforcement

oo Monitor & report on
network traffic andperformance

oo Operator can rate-limit
traffic of all subscribers inthat part of network

oo Implement prioritization
policies

consistent QoE to all network subscribers, while refraining frommaking further investments in network resources. No single user

oo Widen Enterprise customer
base

oo OR operator can rate-limit
traffic per subscriber SLA
oo Automatically restore
regular policy whencongestion subsides

Powered by
Allot Service Gateway

Allot NetXplorer
Management

Allot
SMP/CDCBW info update

Automatic setup(line templates)

Max BW assessment

Departments
Engineering/Operations/Marketing*.CSV Records

Sub info update

ACK

Config sync

Real-time datacollection
per cell

SYN
ACK

Real-time
feedback loop

Subscriber

Technology

Enterprise customers are a potential source of significant revenue
for CSPs. To better compete in this market, CSPs must offer
greater value than just connectivity. By utilizing visibility, control
and security through implementation of automated prioritybased policies, congestion management and bidirectional
security, CSPs can generate revenue by helping enterprises savemoney and increase worker efficiency.

oo Secure enterpriseconnectivity

Powered by
Allot Service Gateway

oo NetXplorer

Allot ClearSee
Analytics

MULTI-TENANT SOLUTION FOR
VISIBILITY & CONTROL FOR
ENTERPRISE CUSTOMERS

oo Improve NW utilization,business critical application
performance

oo NetXplorer

ENSURE QoS THROUGH TRAFFIC CLASSIFICATIONAND OPTIMIZATION

TRAFFIC MANAGEMENTTRAFFIC MANAGEMENT & ACCEPTABLE USE POLICYEnterprise

Departments
Engineering/Operations/MarketingTechnology

WAN Access

AC
K

K
AC
SYN

RNC

Gi
Allot
service gateway

Priority 2

Internet AccessFixed, Mobile, Converged
Fixed, Mobile, Converged

RNC
GGSN

Priority 1

Rome(5Mbps, MIN)

Milan
(10Mbps, MIN)

Venice(2Mbps, MIN)

Social
(1Mbps, Max)

Business

Subscriber
Monitored
cellsInternal RTT measure
CDC Congestion detection & control module

Web,
eMail

Business
Apps

Business
Apps

Web(Priority 4)

Web,
eMail

VoIP
(Expedite)

RT(Expedite)Transaction(Priority1)

eMail

32

33

ALLOT SP USE CASES

TRAFFIC MANAGEMENTTRAFFIC MANAGEMENTOTT VIDEO OPTIMIZATIONKey Benefits

Key Benefits

oo Save network bandwidthand contain costs

oo Save CAPEX - optimize
capacity utilization byshaping bandwidth basedon AS destination

oo Ensure consistently goodvideo QoE

Video content providers always try to maximize resolution, evenoo Increase ARPU with valueadded video services

beyond the ability of many end-users to detect the difference inquality. This can put a serious strain on service providers’ available
bandwidth. At Allot we utilize policy-driven, Layer-7 aware
bandwidth shaping to selectively reduce bandwidth availability
which in turn triggers the video content providers’ adaptive bit
rate technology (ABR) to lower the video resolution. We achieve
this via our lean, cost-effective, inline DPI solution that detects
encrypted video and applies a corresponding bandwidth shaping
policy. This powerful, small footprint solution enables SPs todeliver acceptable video quality, while optimizing the available

OTT Video Optimizationin Action
oo Congestion threshold
triggers optimization policy
for streaming video content
oo Enforce optimization policy
for all video sessions, oronly opt-in customers
oo Shape bandwidth to trigger
corresponding adaptive bitratebandwidth for all user and application needs.

oo Deliver video stream
optimized for receiving
device and per SLA

oo Save CAPEX byautomatically utilizing lesscostly links
oo Save OPEX thru easierpolicy implementation

TRAFFIC MANAGEMENTAUTONOMOUS SYSTEMS-BGP
AWARENESS MANAGEMENT
Optimal utilization of existing capacity as well as preferential
utilization of least cost routing can yield significant CAPEX
savings. To achieve this without impacting QoE, CSPs must

Autonomous SystemsBGP Awareness in Action
oo Monitor AS utilization
trends and costs
oo Implement policies toshape bandwidth in realtime to match next hop
capacity

be able to see and classify traffic routing information in realtime and be able to implement optimal rerouting instantly. By
optimizing the links used by bandwidth-hogging applications, weprevent them from overwhelming others. Using Allot's AS BGP
Awareness enables CSPs to monitor and classify their outgoingtraffic and reroute it and optimize its BW to automatically achieve
the most cost-effective routing and capacity utilization.

oo Implement policies tooptimize routing via lesscostly links
oo Expand capacity only whennecessary

Powered by
Allot Service Gateway
ENSURE QoS THROUGH TRAFFIC CLASSIFICATIONAND OPTIMIZATION

oo NetXplorer

Powered by
Allot Service Gateway

ENSURE QoS THROUGH TRAFFIC CLASSIFICATION AND
OPTIMIZATION

oo NetXplorer
Allot ClearSee
Analytics

Allot NetXplorer
Management

Allot
SMP/CDCBW info update

Automatic setup(line templates)

Max BW assessment

Engineering/Operations/Marketing*.CSV Records

Config sync

Real-time datacollection
per cell

SYN
ACK

Real-time
feedback loop

Subscriber

RNC

K
AC
SYN

DESTINATIONASNTechnology
Fixed, Mobile, Converged

Technology

Next Hop ASN

ISP3

ISP4

International
Traffic

INTERNET

ISP2

Domestic Traffic

ISP1

Fixed, Mobile, Converged
GGSN

RNC

Departments
Engineering/Operations/Marketing

Sub info update

AC
K

AC
K

Departments

Inline Device

Gi
Allot
service gateway

Subscriber
Monitored
cells

34

Internal RTT measure
CDC Congestion detection & control module

AS Reflector
agent (ASRA)

NX

35

ALLOT SP USE CASESSECURITY VAS

Key Benefits

SECURITY VAS
Deliver a branded security service across multiple layers of
security via a unified security service platform. The Allot
Secure platform delivers unified client, gateway and network
based security featuring a seamless customer experience for
event handling, policy setting, and reporting as well as unified
CSP management. Allot SecureNW protects mobile, fixed, andconverged customers at home, at work and on the go.

oo Frictionless onboarding
and built-in customer
engagement tools achieves~50% uptake.
oo Gain exceptionally high NPS
oo Increase ARPU withincremental revenue fromsecurity services
oo Strengthen customer loyalty
with personalized services
oo Protect your subscribers
on-line

SECURITY VAS

SECURITY AS A SERVICE
Consumer security awareness and concerns are growing withevery headline describing a new type of malware or victim’s
story. Cybercrime has become big business, employing
automation to increase the monetization of their nefarious

Security as a Service
in Action
oo Enables informed mass
activation for opt-in
and opt-out try and buy
campaigns
oo Delivers personalized
customer engagement,
reporting and notification
tools

activities. On the other hand, the unskilled consumer is left
exposed with neither the time nor the inclination to deal withthe complexities of security and point security products, theywant someone else to do it for them and they are ready to
pay. This is an opportunity for CSPs to step up and provide
a valuable service that will be mutually beneficial by offering
subscribers security as a service.

oo Protects against adware,phishing, ransomware andother malicious payloads
oo Deliver network-based
security services

Powered byoo NetworkSecure
oo HomeSecure
oo EndpointSecure
oo IoTSecure
oo DDoS Secure

UNIFIED SECURITY FOR THE MASS MARKET

Departments
Security/Marketing

Endpoint

Home

Network

IoT

DDoS

Technology
Fixed, Mobile, Converged3637ALLOT SP USE CASESSECURITY VAS

SECURITY VAS

SUBSCRIBER ENGAGEMENT FOR
SECURITY VAS

Key Benefits

Key Benefits

oo Increase VAS uptake/revenue

oo Extend network based
security on and off net

oo Increase Customer
Satisfaction & loyalty

oo Increase Customer
Satisfaction & loyalty

oo Differentiate brandoo Differentiate brand

SECURITY VAS

UNIFIED SECURITY
While network based security delivers effective security inaddition to proven high adoption rates and significant service

In addition to providing effortless, network-based security for

OTT Video Optimizationin Action

online mobile devices, Allot's NetworkSecure solution is alsoa platform for enhancing customer engagement – throughoo Inject Icon

personalized notifications and inserted info like icons or banners
that attract users' attention and remind them that they are

oo Provide self-service portal

protected - and enable them to easily access self-service portals

oo Report on security events

where they can configure their security settings and view reports

oo Deliver targeted marketingon security events that were blocked. This engagement tool
together with effective security and parental control has helped

Powered byyield incredibly high NPS (Net Promoter Scores).

oo NetworkSecure

Unified Security in Action
oo Unified policy, event
handling and reporting forclient and network based
security

revenue it can only protect the traffic it inspects. To overcome
this constraint, Allot has partnered with client security vendors toprovide a unified solution that combines home gateway, clientand network based security into a seamless security service. Allot
SecureNW is a security service delivery platform designed foroo Seamlessly protect users
when the switch to from
cellular to wi-fi at home oron the go.

CSPs that centrally manages and unifies multilayer, multivendor

oo Protects devices from online and off-line threats (e.g.
syncing with an infected PC)

service. Allot SecureNW delivers a seamless customer experience

security. It unifies network-based security, home gateway
security and security clients into your own branded security
through a single interface for policy setting, reporting, and event
handling.

oo HomeSecure
oo EndpointSecure

Powered byoo NetworkSecure

Departmentsoo HomeSecure

Security/Marketing

oo EndpointSecure

Technology

Departments

Fixed, Mobile, Converged

Security/MarketingTechnology

UNIFIED SECURITY FOR THE MASS MARKETUNIFIED SECURITY FOR THE MASS MARKET

Fixed, Mobile, Converged

Endpoint

38

Home

Network

IoT

DDoS

Endpoint

Home

Network

IoT

DDoS

39

ALLOT SP USE CASESSECURITY VAS

SECURITY VAS

SECURING THE SMART HOME
HomeSecure – a centrally managed thin agent that is remotely
installed onto existing CPEs with less than 10% performance
impact, protects networked devices in the home. ThroughKey Benefits

Key Benefits

oo Deliver CSP branded
security services that
protects both IoT and enduser in the homeoo Increase ARPU withincremental revenue frompremium, opt-in services

oo Increase Customer
Satisfaction & loyalty
oo Increase ARPU withincremental revenue fromsecurity services

machine learning techniques and visibility provided by the agent,
all the devices within the home are identified, a default security
policy is applied per device to protect against external threats
and the home network is segregated to block lateral malware
propagation.

oo Protecting IoT and user
devices from on-line
external threats

THE SECURE SMART HOME
Homeback-end/front-end servers

Securing the SmartHome
in Action

integration with 3rd party
threat databases

oo Segregating the home
network to contain infected
devices from lateral
infection
oo Hardening of CPE

SECURITY VAS

PARENTAL CONTROL

oo Strengthen customer loyalty
with personalized services
oo Enhance brand image

Parental Control service allows operators to provide peace ofmind to parents who are concerned about the online activity

Parental Control in
Actionoo Use self-care portal to set
up safe-browsing profile forkids device(s)oo Monitor and filter Web
traffic generated by opt-in
devices in real time
oo Analyze filtered traffic andenforce safe browsing rules
in real timeof their children. Using a simple online setup screen, parents
can control access to specific URLs and to a wide array ofcontent categories such as gambling, pornography, dating sites,
violence, racism and many others. They can also set time limits
on browsing, set up different rules for each child’s device, andadjust them at any time. Real-time notifications and monthly
usage reports are all part of the service. Operators can deploy this
opt-in service in multi tenancy mode that allows consumers topersonalize their own security settings or in single tenancy modethat offers a standard set of security features for all subscribers

oo Send real-time notifications
and monthly usage reports
to parent

Powered byoo HomeSecure

Powered byoo NetworkSecure

Mobile App/SDK

DepartmentsHome
add-on software

example, password strength enforcement, open port analysis andprotection and unauthorized access control. HomeSecure is thehome gateway security layer of Allot SecureNW

Any threat

oo EndpointSecure
Security/Marketing

The agent also hardens the CPE against attack, protecting it fromsecurity vulnerabilities that can compromise the CPE itself, for

SECURING THE ONLINE EXPERIENCE

oo HomeSecure

Technology

Departments
Security/Marketing

Fixed, Mobile, Converged

Technology
Fixed, Mobile, Converged

CustomerEverywhere
40

Every asset
41

DDoS PROTECTION

DDoS PROTECTION

Key BenefitsYour network business and reputation depend on 100% service

oo Protect NW assets
automatically, reducing
OPEX

availability. That’s why Allot helps you establish a completely
automated, real-time defense against large scale inbound andoutbound volumetric attacks. Allot accurately detects andmitigates zero-day DDoS attacks in seconds, without requiringsupervision and before your infrastructure suffers costly service
disruption or downtime.

oo Synergistic traffic
management ensuresconsistent customer QoEeven under attack
oo Protect reputation by
preventing SP fromspreading IoT-based attacks
oo Acquire comprehensive
threat intelligence

DDoS PROTECTION

BIDIRECTIONAL DDoS PREVENTION
DDoS attacks pose some of the most serious threats to yournetwork, your services, your customers and your business.
These complex, constantly mutating attacks continue tobecome larger and more menacing. With the growth of IoT,
the threat has increased, and incidents now involve botnets
created by hundreds of thousands of infected devices that
disable services for millions of users. To address this, you need

Bidirectional DDoS
Prevention in Action

a robust solution you can rely on, that can guarantee detectionand elimination of these attacks within seconds, before they areable to disrupt your network service

oo Detect known andunknown attacks in realtime; both incoming andoutgoing
oo Mitigate within seconds
oo Preserve legitimate traffic

Powered byoo Service Gateway
oo NetXplorer
oo DDoS Secure

BIDIRECTIONAL DDOS PROTECTION

oo Subscriber Management
Platform

Departments
Security/Engineering/Operations/Marketing
EXTERNAL

EDGE

CORE

Technology
Fixed, Mobile, Converged

4243ALLOT SP USE CASES

DDoS PROTECTION

DDoS PROTECTION

DDoS SECURITY AS ASERVICE FOR ENTERPRISE

Key Benefits

Key Benefits

oo Differentiate connectivity
servicesoo Differentiate wholesaleconnectivity services

oo Protect Enterprisecustomers

oo Protect customers’ NW
assetsoo Protect customers’
reputationoo Protect customers’
reputation

DDoS attacks pose some of the most serious threats to your

DDoS PROTECTION

DDoS SECURITY AS A SERVICEFOR INTERCONNECT CARRIERSDDoS attacks pose some of the most serious threats to yourenterprise customers’ networks, their services, their customers

customers’ networks and their business. These complex,

Bidirectional DDoS
Prevention in Action

Bidirectional DDoS
Prevention in Action

oo Detect known andunknown attacks in realtime; both incoming andoutgoing

oo Detect known andunknown attacks in realtime; both incoming andoutgoing

this, you need a robust solution you can rely on, that canoo Mitigate within seconds

oo Mitigate within seconds

can guarantee detection and elimination of these attacks within

guarantee detection and elimination of these attacks within

oo Preserve legitimate trafficoo Preserve legitimate traffic

seconds, before they are able to disrupt your network service.

Powered byPowered byoo Service Gateway

oo Service Gateway

oo NetXplorer

oo NetXplorer

oo DDoS Secure

oo DDoS Secure

oo Subscriber Management
Platformoo Subscriber Management
Platform

Departments

Departments

Security/Engineering/Operations/Marketing

Security/Engineering/Operations/MarketingTechnology

Technology

Fixed, Mobile, Converged

Fixed, Mobile, Converged

and their business. These complex, constantly mutating attacks
continue to become larger and more menacing. With thegrowth of IoT, the threat has increased, and incidents now
involve botnets created by hundreds of thousands of infected
devices that disable services for millions of users. To address

constantly mutating attacks continue to become larger and more
menacing. With the growth of IoT, the threat has increased, andincidents now involve botnets created by hundreds of thousandsof infected devices that disable services for millions of users. To
address this, you need a robust solution you can rely on, that

seconds, before they are able to disrupt your network service.

BIDIRECTIONAL DDOS PROTECTION

EXTERNAL

44

EDGE

CORE

BIDIRECTIONAL DDOS PROTECTION

EXTERNAL

EDGE

CORE

45

ALLOT SP USE CASESIoT SECURITY

IoT SECURITY

Key Benefits

Capitalize on new opportunities created by the Internet ofoo Increase ARPU throughvalue added services

Things by meeting IoT control and security challenges head on.
Allot helps you protect your IoT service network and increase
operational efficiency, while enabling value added services, suchas IoT security tiers and IoT analytics that give your offering aoo Differentiate your IoT
offering
oo Meet growing demand for
IoT security services

IoT SECURITY

IoT SECURITY AS A SERVICE
Security is the number one concern for Enterprises that want to
deploy or extend their IoT networks. CSPs are ideally positioned

competitive edge and generate new revenue.

IoT Security as a Service
in Action

to deliver network-based security services as additional assets
to their connectivity services to increase IoT monetization anddifferentiate their offering for an additional competitive advantage.

oo Policy definition forbehavior assurance

IoT network-based Value Added Services are fully aligned with theoo Behavioral analysis andanomaly detection

carrier-class security, behavior analysis, and traffic intelligence

oo Bot and DDoS protections
oo Data-driven decisions for
informed troubleshooting

operator’s expertise and core business. Allot’s IoTSecure delivers
and control. It enables your customers to configure the following
services and features through a customer self-care portal.
IoT Security: A network-based security solution that protects
against malware and botnets and enables remote remediation ofPowered byoo Service Gateway

suspect devices through smart quarantine that limits connectivity
only to remote diagnostic and remediation systems.

oo NetXplorer

Behavior Assurance: The ability for an enterprise to define policies

oo IoTSecurethat manage IoT deployments. This includes whitelisting of

oo DDoS Securecommunications, protocols, and traffic patterns of IoT devices

oo ClearSee

with their legitimate servers.

oo Subscriber Management
Platform

Behavior Profiling and Anomaly detection: An artificial
intelligence approach to IoT analytics for detecting SIM misuse

Departments

and data plan protection and identifying compromised or
malfunctioning IoT devices.

Security/Operations/Marketing

IoT VISIBILITY, SECURITY & CONTROLBEHAVIORASSURANCE

Technology
Fixed, Mobile, Converged

IoT
SECURITY

46

IoT

BEHAVIORPROFILING

47

ALLOT SP USE CASESIoT SECURITY

IoT SECURITY

IMPROVE IoT OPERATIONAL
EFFICIENCY
Operational efficiency is key to scaling and protecting thecommunications infrastructure efficiently and supporting the

Key Benefits

Key Benefits

oo Improve operational
efficiency through visibility
and control of connected
IoT deployments

oo Protect the mobile
infrastructure from IoT
borne attacks

oo Data driven traffic
management,
capacity planning andtroubleshooting

informed investment decisions, expedite troubleshooting, andverify that customers meet the terms and conditions of an IoTIoT Operational
Efficiency in Action

adaptive traffic management to ensure user QoE in the face of

oo Gain visibility on IoT
behavior to manage andpromote data plan

growing IoT deployments on a shared infrastructure.

oo Monitor SIM behavior

Data Plan. In addition, QoE based congestion control provides

oo Alert and block uponanomalous data trafficoo QoE-based congestion
controlPowered byoo Service Gateway
oo NetXplorer
oo IoTSecure

IoT VISIBILITY, SECURITY & CONTROL

oo DDoS Secure
oo ClearSee
oo Subscriber Management
Platform

IoTSecure ensures resilience of the CSP infrastructure andmaintains QoE for customers who rely on a carrier’s network.

Protect Infrastructurefrom IoT Borne Attacks
in Action

The volume of IoT-borne DDoS traffic can have a devastating

oo Profile and monitor
behavior of IoT traffic

infrastructure. Allot IoTSecure DDoS protection is unique as it

oo Apply behavioral analysis
and anomaly detection

mitigation in less than 60 seconds

oo Identify and quarantine
anomalous device traffic

This protects the infrastructure against DDoS attacks initiatedoo Bidirectional DDoS
protection

bystanders sharing the same network.

impact on the communications infrastructure it traverses and
the QoE of customers who share the same telecommunications
provides advanced, behavior-based bidirectional detection andfrom internal and external sources and maintain the QoE of

oo IoT Bot protection

Powered byoo Service Gateway
oo NetXplorer
oo IoTSecure
oo DDoS Secure

IoT VISIBILITY, SECURITY & CONTROL

oo ClearSee
oo Subscriber Management
Platform

LAN/WAN

LAN/WAN

Departments
ALLOT SG

Security/Operations/MarketingTechnology
Fixed, Mobile, Converged

48

PROTECT INFRASTRUCTURE
FROM IoT BORNE ATTACKSoo Prevent damage to
reputationoo Prevent revenue leakage

rapid growth of IoT and related infrastructure investments.
IoTSecure provides IoT aware network analytics to support

oo Protect IoT deploymentsfrom attacks

IoT SECURITY

Departments
Security/Operations/Marketing

ALLOT SGTechnology
Fixed, Mobile, Converged49ALLOT SP USE CASESREGULATORY COMPLIANCE

Regulatory Compliance

Key BenefitsYour communications network is subject to a wide range ofoo Get off and stay off
spammer blacklists

regulations that require timely and firm compliance. With thepower to inspect all traffic on your network, and to forward
and filter, Allot's SmartRegulator helps you successfully
navigate the changing regulatory landscape.

REGULATORY COMPLIANCE

oo Reduce complaints fromother operators

ANTI-SPAM(BLACKLIST PREVENTION)

oo Avoid unnecessary
investment in contentbased spam filteringsolutions

Outbound spam is the primary cause of service provider
blacklisting. While DNS blacklists (DNSBL) are widely used as a first

Anti-spam in Action

line of defense, they are mostly ineffective as they rely solely on
the spamming IP address. Consequently, when spam originates

oo Detect anomalous behavior
consistent with spammingfrom the service provider network the spamming IP is blacklisted,oo Quarantine spammer into
service plan that blocks,
rate-limits, or redirects thespam traffic

having inherited a blacklisted IP (via DHCP) or by sharing the sameoo Notify subscriber via SMS
and/or email

and many innocent subscribers are also impacted, either by“public” IP (behind the same NAT IP) as the spammer. Blacklist
prevention obviates this problem by detecting the spamming
subscriber and automating the process of notification andremediation of infected devices

oo Redirect spammer toclean-up portal to remove
spambot infection

Powered byoo Service Gateway
oo NetXplorer
oo ClearSee

Departments

IOT VISIBILITY, SECURITY & CONTROL

Security/Operations

Technology
Fixed, Mobile, Converged

ALLOT SPAM FILTERING

50

51

ALLOT SP USE CASESREGULATORY COMPLIANCEREGULATORY COMPLIANCE

BLACKLIST URL FILTERING
When government regulations forbid your network fromproviding access to illegal or harmful content, Allot’s carrier-

Key Benefits

Key Benefits

oo Comply with Regulations

oo Comply with Regulations

oo Enhance reputation byprotecting users frommalicious content

oo Enhance reputation byprotecting users frommalicious content

oo Support millions ofusers without impacting
performanceoo Support millions ofusers without impacting
performanceclass URL filtering service gives you the flexibility to comply

REGULATORY COMPLIANCEUNIFIED REGULATORY COMPLIANCE
Regulations aimed at protecting the general population often
require network operators to capture, analyze and retain
records of application usage, block harmful content and sites

with regulatory requirements and to proactively provide a safer
and more protected Internet environment for your customers.
With the power to inspect all traffic on your network, Allot’s URL
filtering capabilities ensure that blacklisted and illegal Internet
sites are blocked in real time.

Blacklist URL Filteringin Action

Unified Regulatory
Compliance in Action

oo Integrate with authorized
blacklists such as Internet
Watch Foundation (IWF)

oo Obtain granular, big data
visibility into network, user
and application behavior

oo Automate blacklist
updates ensure constantcompliance

oo Block illegal content andapplications

oo Easily integrate additional
blacklists

Powered byoo Retain unlimited amount ofdetailed usage records

and safeguard communication infrastructures against denialof service attacks. Law enforcement and homeland security
agencies rely on service providers to lawfully intercept, block andrecord dangerous traffic to help mitigate internal and external
criminal and security threats. To meet these requirements, service
providers need a flexible, powerful and scalable solution that
resolves current and future threats through adaptive machinelearning of malicious behavior and dynamically expanding threat
identification.

oo Protect Network
infrastructure against both
inbound and outbound
DDoS attacks

oo Service Gateway
oo NetXplorer
oo ClearSee

BLOCK UNDESIRABLE SITESPowered byoo Service Gateway

UNIFIED REGULATORY COMPLIANCE

oo NetXplorer

Departments

ILLEGAL CONTENTACCESS DENIED
Allot NetXplorer
Management

oo ClearSee

Security/Operations

Departments
Technology
ISP Access

INTERNET

Security/Operations

Fixed, Mobile, Converged

Technology
ALLOT CONTENTPROTECTOR

52

Fixed, Mobile, Converged53ALLOT SP USE CASESREGULATORY COMPLIANCEREGULATORY COMPLIANCE

Key Benefits

Key Benefits

oo Comply with Regulations

oo Comply with regulations

USAGE RECORDS STORE & RETRIEVE

oo Increase customer
satisfaction and loyalty

Usage Records Store &Retrieve Action
Regulatory compliance has become mission critical for national
authorities and service providers due to increased cyber threatssuch as offensive, criminal or unethical online activities, andattacks on communications infrastructure. Regulations aimed at
protecting the general population often require network operators
to capture, analyze and retain records of application usage.

oo Record and store per-user
online activity records in Big
Data database

Law enforcement and homeland security agencies rely on

oo Provide interface for
information lookup

service providers to lawfully intercept, block and record
dangerous traffic to help mitigate internal and external criminaland security threats.

Powered byoo Service Gateway
oo NetXplorer
oo ClearSee

Departments
GRANULAR VISIBILITY INTO ALL APPLICATION AND USER TRAFFIC

Security/Operations

BILL SHOCK PREVENTION

oo Generate additional revenue
via new upsell opportunities

When faced with an unexpected high charge for data roaming

oo Lawfully intercept and block
dangerous traffic
oo Filter out illegal and harmful
URLs

REGULATORY COMPLIANCE

services, customers are likely to be in for a shock. Valid or not,Bill Shock in Action
oo Detect roaming when data
session is initiated andredirect to operator portal
oo Option 1: Purchase apackage that blocks certain
content when roaming
oo Option 2: Acknowledge
additional charges andcontinue under current
service plan

they often contest the charges claiming they were not informedby the operator. Hoping to keep customer satisfaction andretention high, operators may end up waiving the extra charges
and pick up the tab themselves, resulting in significant revenue
loss. This phenomenon has resulted in legislation and regulations
to prevent bill shock. Bill shock prevention service enables
operators to notify roaming subscribers of data session costs
in real time, and require that they acknowledge these charges
before establishing a connection. Customers feel more in control
when charging schemes are transparent and known up front.

oo Option 3: Purchase a
discounted data roaming
package for a limited timePowered byoo Service Gateway
oo NetXplorer

ANALYTICSTOOLSANALYSIS
Allot ClearSee
Network Analytic

Dashboard
Actionable insights
Custom reports
Real-Time monitor

oo ClearSee
Bifront-end

Trends, outllers, thresholds

SYSLOG

ActionTechnology
Fixed, Mobile, Converged

SMART
DATA
SOURCESTORAGE
Allot Data
Warehouse

Customized by Allot data science service
Other
data sources

Smart Data Sets
(CSV/SQL)

CVM, CEM big data
projects use casevisabillity SIEM

Allot DWH of joined
aggregated data

STREAMINGDATARECORDSPROCESSING
Granular and diverse xDRs (CSV)

Allot DataMediator
Extract, transform,load (ETL)

STREAMINGDATARECORDS

54

COLLECTION

oo Subscriber Management
Platform

Departments
Security/Operations

Regulatorycompliance, BillingTechnology
Mobile, Converged

Allot Service
Gateaway

55

FINAL WORD
With over 20 years’ experience empowering service providers to get more outof their networks and to manage them more efficiently, we enable network
operators to clearly see and understand their networks from within. Allotprovides its customers with the tools to optimize, innovate, and capitalize on
every opportunity; to learn about users and network behaviors; to improve
quality of service and reduce costs; and to detect security breaches to protect
their own networks and their users from attacks. All of this is achieved while
increasing value to customers and deploying new services more quickly thanever before.

When visibility is clear and network intelligence is accurate, you can make smart
decisions in real time to truly manage your network, engage your customers
and innovate with new services.

Allot’s multi-service platforms are deployed by over 500 mobile, fixed andcloud service providers and over 1000 enterprises globally in the mostdemanding environments. We support our customers’ requirements to scaleefficiently and keep pace with evolving network architectures by offering themost scalable platforms in the market including tested NFV compliant solutions.
For more information, visit: https://www.allot.com/service-providers/Allot Communications Ltd. All rights reserved. Allot Communications, Sigma and NetEnforcer and the Allot logo are trademarks of Allot Communications. All other brand or product names 2018 ©
are the trademarks of their respective holders. The information in this document is for reference purpose only and constitutes neither an offer, a commitment nor an acceptance. Allot may change.the information at any time without noticewww.allot.com