SessionMonitorProductFamily Level 2 WithAudio

Download as pdf or txt
Download as pdf or txt
You are on page 1of 86

Oracle Communications Session

Monitor Product Family


Level 2 - Technical Presentation

Vivek Bhargava
Director, Product Marketing, Service Provider Networks
Communications Global Business Unit

October, 2015

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |


Agenda

1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 2


Overview
Problem Statement
• IP real-time communications networks are more complex than circuit-switched
– Breadth of services is unprecedented and expanding
– New concerns such as QoS, security, and interoperability
– Several signaling protocols and codecs
– Prone to service theft in new ways
• Service providers are faced with new challenges
– How to improve customer experience
– How to rapidly troubleshoot and isolate problems
– How to ensure customer SLAs are maintained
– How to optimize networks and keep up with growth

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 3


What CSPs Need
Do not underestimate value of good tools
• Improve customer experience
– Be able to dig deep into customer records and activity
– Drill down into individual calls
– Isolate issues at segment level
• Ensure SLAs are maintained
– Monitor on a per customer basis – not just aggregate
– Automatically raise warnings and alarms
• Avoid congestion and plan for growth
– Obtain device and network-wide KPIs
– Sample and analyze call quality
– Utilize analytics to monitor usage patterns and service quality over time

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 4


Network Monitoring
Levels of Sophistication

General Purpose Active Probing or Free or “Free” Tools Domain Experts


Network, APM*, Testing Tools; Add-on
SNMP polling tools SBC tools

 Tools designed to
capture all network  Tools used to generate  Freeware designed to
traffic (usually Layer 1- synthetic calls, for the capture and analyze
3) and/or SNMP and purposes of load testing, PCAPs  Tools, like OCSM, that
provide aggregated path validation, or are designed
stats  Tools provided along
quality specifically to analyze
with UC solutions for
 Tools designed for and report on real-
 Tools that can see traffic basic analysis (“free”
generic app time communications
through an SBC, like as often given away in
performance (i.e. VOIP AudioCodes SEM a larger deal)
= just another app)
*APM = Application Performance Management

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 5


Oracle Communications Session Monitor (OCSM) Product Family
Family Members

On-demand correlation
• Probes Aggregation Engine Global KPIs
– Standalone MEC OCFM Fraud Analysis

– OC Session Border Controller


(OCSBC)
• Mediation Engine Mediation Engine Mediation Engine
Signaling Analysis
Real-time Correlation
– OC Operations Monitor (OCOM) OCOM OCOM OCCPM
Data Storage
User Interface
– OC Enterprise Operations Monitor
(OEOM)
– OC Control Plane Monitor (OCCPM)
Sniffing
• Aggregation Engine Probe Probe Probe Probe Probe Probe
Media Analysis
– OC Fraud Monitor (OCFM)
– Mediation Engine Connector (MEC)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 6


OCSM Product Family: Visualizing Real-Time IP Networks

Customer Experience Real-Time Sophisticated Fraud Management


Monitoring Troubleshooting Detection & Reporting

 Root cause analysis with  Detects suspicious


 Historical data and drill-down  Accurate transaction
behavior immediately
trends detail records
 Configurable alerts  Self-learning
 End-to-end monitoring  Extensible dashboards
and call correlation  Live user search  Collaborative blacklists and data export facility

OC Operations Monitor OC Fraud Monitor OC Control Plane Monitor

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 7


OC Session Monitor Product Family
Deployment Architecture
Mediation Engine
Control
Operations Monitor Fraud Monitor  Historical data
Plane Monitor
 Traffic analysis
 System management
Mediation Engine
 Real-time processing
 Correlation
VoIP
Carriers
GMSC SGW MGC
S6 Diameter VoIP
Transaction Carriers
STP HSS DSC

SIP Peering
S-CSCF S-CSCF SBC

I- PSTN
P-CSCF SBC SS7 SS7
CSCF
GW
Cloud
IMS Core

Session Monitor SBC


Next Generation Network
Agents (network
probes) Oracle embedded agents
 Data retrieval  Data retrieval
 Preprocessing  QoS reporting
Residential Business  Event reporting
 Media analysis users users
 Media recording

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 8


Network Probes
Introduction

• Functions
– Capture traffic
– Analyze media quality
– Calculate MOS, R-Factor, packet loss, etc.
– Send data on signaling and media quality to ME
– Connects via port-mirroring features of network switches
• Hardware
– For small installations, may be collocated with ME
– Standalone: Debian or Oracle Linux 64-bit based COTS (Intel x86 64-bit compatible) or Sun
hardware
– Integrated with OCSBC or OCSR: Required for encrypted signaling traffic

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 9


Probe Types
Comparison Matrix
Embedded in Embedded in Standalone
Features
SBC/SR SBC with NIU Probe
Decode SIP sessions   
Decode SIP/TLS sessions   x
Decode SIP/ TLS and SRTP x  x
MOS Score intervals x End of call Every 10s
RTP Recording x x 
Packet Inspector x x 
Performance hit (CPU load) 10-15% 10-15% -
Everything presented by
Traffic captured Passing through Element Passing through Element
mirrored ports

Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 10


Mediation Engine
Introduction

• Consists of Operations Monitor and, optionally, Control Plane Monitor


• Flexible deployment but generally deployed one in every geographic site
• Functions
– Consume, correlate, and store probe data
– Measure, manage, and store KPIs
– Provide user front end UI
• Hardware
– Debian Linux 64-bit based COTS (Intel x86 64-bit compatible)
– Virtual machines

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 11


Aggregation Engine
Introduction

• Contains Fraud Monitor (FM) and Mediation Engine Connector (MEC)


• Only one Aggregation Engine required for the whole network
• Functions
– MEC aggregates information and KPIs at a global level (multiple geographical sites)
– FM detects and prevents phone fraud
• Hardware
– Debian Linux 64-bit based COTS (Intel x86 64-bit compatible)
– Virtual machines

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 12


Agenda

1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 13


OC Operations Monitor
What is it?
 End-to-end call monitoring system
 Automatic call correlation
 Ladder diagrams production (including packet-by-packet view)

 Real-time working engine


 Call identification (no need for CDR or DB-driven on-demand analysis)
 Call update (status, codec, etc.)

 Media quality analysis service:


 Based on ITU-T G.107 algorithm (R-factor and MOS scores calculated)
 Can also rely on RTCP, RTCP-XR, X-RTP-STAT, P-RTP-STAT, RTP-RXSTAT reports

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 14


OC Operations Monitor
How it works?
 Passive and non-intrusive tool
 No traffic rerouted
 Zero-touch (no configuration required on production nodes)
 Software-based solution
 Software running on COTS or integrated to Oracle SBCs
 License based on number of concurrent calls
 Software probes are free and do not affect OM licensing
 Web-based architecture
 Intuitive, comprehensive, and customizable dashboards to view activity and KPIs in real-time
 Automatic adaptation of GUI for different screen sizes – large monitors to smaller tablets
 No Java or any other helper packages to install

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 15


OC Operations Monitor
Supported Protocols
Plane Realm Protocols IMS interfaces
Call Control SIP (SIP-I/SIP-T) Ma, Mg, Mi, Mj, Mk, Mm, Mr,
Mr’, Mw, Mx, Gm, ISC
ISUP (SIGTRAN) Ie

Gateway Control MEGACO / H.248 Mn, Mp, Ia, Iq


Signaling
MGCP –

DB Querying Diameter, SQL, REST, CDR Cx

ENUM CSCF – ENUM Server

User Plane RTP PGW – BGF


BGF – MRFP
BGF – MGF
Media
Reporting RTCP-XR –

SIP Headers Report –

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 16


OC Operations Monitor
Main Features – Simple and Intuitive GUI

• Configurable
dashboards
• Alerts settings
• Traces generation
• Apps scripting
• Operations
management
• Customers management

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 17


OC Operations Monitor
Main Features – Performance Management

• More than 200 KPIs


– Pre-defined metrics
– IETF metrics
– Advanced metrics
• Customization available
• Metrics aggregation
– Per core device
– Per realm
• Export (SNMP, REST API,
Apps)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 18


OC Operations Monitor
Main Features – Monitoring and Troubleshooting

• Call logs (real-time)


• Call filtering
• Network tracing (end-to-
end)
• Call drill-down
• IP decoding
Idem for registration
events

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 19


OC Operations Monitor
Main Features – Media Quality Analysis

• MOS evolution (real-time)


– Platform-wide
– Per core device
Requires standalone probes
• VQ details
– MOS, jitter, packet loss, codecs
– Available for each call
– RTCP information
– DTMF telephone-events

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 20


OC Operations Monitor
Main Features – User Tracking

• Live user search


(MSISDN)
• User data collection
– Contact information
– Registration events
– Call history
• User device statistics

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 21


OC Operations Monitor
Main Features – Traffic Reporting

• Data collection
– Dashboards
– CDRs & MDRs (CSV)
– Call reports (HTML & PDF)
– Packet captures (PCAP)
• Data export
– SNMP
– (S)FTP (CSV)
– REST API (JSON)
– App (CSV)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 22


OC Operations Monitor
Main Features – Packet Inspector

• Real-time packet
capture
• Centralized packet
analysis
– TShark display filters
– L2 to L7 inspection
• Everything but RTP

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 23


OC Operations Monitor
Main Features – Mediation Engine Connector

• OCOM extension for large


networks
• End-to-end visibility of multiple
network sites
• On-demand call correlation
across geographical sites
• KPIs aggregation OCOM coordination across
geographically distributed network

• Global search and drill-down


Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 24
OC Operations Monitor Currently
Analytics - Acquire, Organize, Analyze, Visualize, Feedback, Predict, Improve in PoC

All raw + xDR data fed to Aggregate results fed to OCDM


BDA for long-term for further and ongoing
storage, analytics and analytics; optionally archive
staging for OCDM data to BDA

Session Monitor probes collect Select data (calculated KPIs) fed


network data from Session Monitor directly to
OCDM for further analytics

Feedback loop to applications providing OCDM information


(e.g. churn probability, customer value, etc.)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 25


Product Extensions
OCOM
Extension Description

Media Quality Enables processing of both media streams (RTP) and RTCP reports

Application Support Supports customer specific apps to extend the base functionality

REST API Provides an open interface for 3rd party apps to access real-time and historic
data
CDR Generation Generates CDRs from end-to-end correlated calls. These CDRs have a lot
more information than just that necessary for billing
Protocols Additional signaling protocols such as H.248, SIGTRAN, ENUM, and
Diameter
Mediation Engine Connector Increases scalability by providing a single dashboard for multiple Mediation
Engines

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 26


Agenda

1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 27


OC Control Plane Monitor
What is it?

 End-to-end Diameter protocol transaction monitoring system


 Automatic Diameter signaling correlation
 Ladder diagrams production (including packet-by-packet view)

 Real-time working engine


 Transaction identification (no need for CDR or DB-driven on-demand analysis)
 Transaction update (status, result code, etc.)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 28


OC Control Plane Monitor
How it works?

 Passive and non-intrusive Tool


 No traffic rerouted
 Zero-touch (no configuration required on production nodes)

 Software-based solution
 Software running on COTS
 Software probes are free

 Web-based architecture
 Intuitive and simple GUI
 No agents or Java packages to install

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 29


OC Control Plane Monitor
Why it helps?

 Live Diameter transaction monitoring & analysis


 EPC troubleshooting & visibility
 User tracking
 Traffic data reporting
 Network management extensibility

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 30


OC Control Plane Monitor
Supported Interfaces

3GPP Interface Reference Point Nodes Involved Procedures

• Location management
S6a MME – HSS • Subscriber data handling
• Authentication
S6 • Fault recovery
• Notification
S6d SGSN – HSS

S13 MME – EIR UE identity (IMEI) check


S13
S13’ SGSN – EIR

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 31


OC Control Plane Monitor
Main Features – Simple and Intuitive GUI

• Configurable dashboards
• Alerts settings
• Apps scripting
• CPM management

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 32


OC Control Plane Monitor
Main Features – Performance Measurement

• Pre-defined metrics
• KPIs aggregation (core device)
• Export (SNMP, REST API, Apps)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 33


OC Control Plane Monitor
Main Features – Monitoring and Troubleshooting
• Transaction logs (real-time)
• Transaction filtering
• Network tracing (End-to-end)
• Transaction drill-down
• IP decoding

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 34


OC Control Plane Monitor
Main Features – User Tracking

• Live user search (IMSI)


• User data collection
– MSISDN
– Network attachment state
– Location
– Phone type
– Transaction history

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 35


OC Control Plane Monitor
Main Features – Traffic Reporting

• Data collection
– Dashboards
– TDRs (CSV)
– Transaction reports (HTML)
– Packet captures (PCAP)
• Data Export
– SNMP
– (S)FTP (CSV)
– REST API (JSON)
– App (CSV)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 36


OC Control Plane Monitor
Main Features – Packet Inspector

• Real-time packet capture


• Centralized packet
analysis
– TShark display filters
– L2 to L7 Inspection
• Diameter interfaces (S9,
SGs…)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 37


Agenda

1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 38


Types of Telecom Fraud
Methods of Access and Methods of Abuse

International SIM Additional


revenue-share boxing/bypass scenarios
fraud fraud
How do fraudsters
make money?

PBX Voicemail
hacking hacking

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 39


Types of Telecom Fraud
PBX Hacking

• Attackers scan networks for VoIP equipment


• Brute force password guessing
– Lack of password policies
– Easily guessable passwords
• Misconfiguration
– Inbound calls allowed without authentication

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 40


Types of Telecom Fraud
Voicemail Hacking

• Voicemail features
– Customers leave messages
– Subscribers listen to messages
– Call-back
– Call-through
• Fraudsters abuse call-through feature
• When call-through is forbidden call-back might be used
– Leave voicemail with spoofed (foreign) number
– Log in, listen to message, use ‘call back’

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 41


Types of Telecom Fraud
IRSF
Sells account information
Fraudster operates revenue-share number(s)
Attacker
 Minimal technical overhead Fraudster
 International number for higher revenue Injects calls
 Foreign Scans
country improves security
Revenue
networks based on call
Revenue based on call volume Entice to make calls volume
 Make calls on third parties behalf
PBX systems
- Hack PBX and route calls through it Foreign
 Motivate third parties to make calls country carrier
- Missed calls, lottery/banking scams, etc.
Revenue-
Make calls
share number
Revenue paid daily/weekly
 Subscriber billing cycle: monthly
Subscribers
 Fraudster is long gone before investigations start

Money flow:
Subscribers pay bill to phone operator Operator pays fraudster

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 42


OC Fraud Monitor
What is it?

• Stops fraud as it happens


– Detects fraud in seconds (once the criteria for fraud are met)
– Does not rely on CDRs (then can prevent fraud even if the call is not finished)
• Flexible lightweight deployment
– Available on top of OCOM system (as a separate product)
– Relies on existing passive Probes and MEs (cannot be detected by hackers)

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 43


OC Fraud Monitor
How it works

• Uses data gathered from probes and reported through Mediation Engine
• Applies rules to every reported call, and collects a score if rule is executed
• Triggers alerts based on score accumulated due to rule executions

Standalone Real-time
data
probe
Mediation Call data Alerting
OCFM Alert
Engine
OCSBC built-
in probe

• Per-destination behavior
• Scoring history

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 44


OC Fraud Monitor
Why it helps?

 Real-time monitoring
 Blacklists based on source and destination DN, IP address, phone number
range
 Fraud detection in NGN
 System flexibility & scalability

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 45


OC Fraud Monitor
Main Features

• Last hour status


• Number of calls
processed
• Incidents history

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 46


OC Fraud Monitor
Main Features – Incidents List

• Alerts raised
• Suspected user
details
• Suspected calls
history

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 47


OC Fraud Monitor
Main Features – Metrics

• Destination-based traffic
spikes
• Static metrics
– Based on absolute numbers
• Dynamic metrics
– Based on deviation from learned
behaviors

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 48


OC Fraud Monitor
Main Features – Blacklists
• Blacklist data
– IP address
– Phone number (+prefix)
– SIP user-Agent
• Global blacklist
– Bulk loading of large data sets
– Verified cases
– Known premium rate ranges
• Custom blacklist
– Local additions & exceptions

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 49


OC Fraud Monitor
Main Features – OCOM Integrations

• Tracking based on
subscriber
• Call details per
subscriber
65 seconds between
• Message flow successful break-in
and abuse
analysis
• Traffic reporting
• OCDM integration
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 50
Agenda

1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 51


System Architecture
Components

Functions / Applications Nodes

• OCFM
 Aggregation Engine
• OCOM MEC

• OCOM
 Mediation Engine
• OCCPM

• Probe  Probe

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 52


System Architecture
Functional View App/DB
Layer

OCFM MEC

OCCPM OCOM OCOM

Capture Layer
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 53
System Architecture
Logical View

VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC

I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core
SBC
Next Generation Network

Residential users Business


users

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 54


System Architecture
Logical View

VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC

I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core

Server Probes SBC Oracle Probes


Next Generation Network
(native) (embedded, i.e. SBCs)
 Data retrieval  Data retrieval
 Preprocessing Residential users Business  QoS reporting
 Media analysis users  Event reporting

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 55


System Architecture
Logical View

OCOM

Mediation Engine
VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC

I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core

Server Probes SBC Oracle Probes


Next Generation Network
(native) (embedded, i.e. SBCs)
 Data retrieval  Data retrieval
 Preprocessing Residential users Business  QoS reporting
 Media analysis users  Event reporting

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 56


System Architecture
Logical View

OCOM OCOM

Mediation Engine Mediation Engine


VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC

I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core

Server Probes SBC Oracle Probes


Next Generation Network
(native) (embedded, i.e. SBCs)
 Data retrieval  Data retrieval
 Preprocessing Residential users Business  QoS reporting
 Media analysis users  Event reporting

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 57


System Architecture
Logical View
MEC

Aggregation Engine

OCOM OCOM

Mediation Engine Mediation Engine


VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC

I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core

Server Probes SBC Oracle Probes


Next Generation Network
(native) (embedded, i.e. SBCs)
 Data retrieval  Data retrieval
 Preprocessing Residential users Business  QoS reporting
 Media analysis users  Event reporting

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 58


System Architecture
Logical View
OCFM

Aggregation Engine

OCOM OCCPM

Mediation Engine Mediation Engine


VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC

I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core

Server Probes SBC Oracle Probes


Next Generation Network
(native) (embedded, i.e. SBCs)
 Data retrieval  Data retrieval
 Preprocessing Residential users Business  QoS reporting
 Media analysis users  Event reporting

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 59


Deployment Considerations
Scalability – Scales to Millions of Users

Mediation Engine Connector


• Coordinates MEs across
large networks
• E2E call visibility
• On-demand call correlation ME
across sites ME
ME
• Global dashboard & search
• Centralizes user
management
• Simplifies alert
management
MEC
• Minimizes WAN BW usage

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 60


PSTN IP Peer IP Peer

Deployment Considerations
High Availability
• Active – Active configurations can be created
using separate hardware
– REST-API enables ME pair configuration REST-API
Probe
synchronization
– Probes connected to multiple MEs ensure data
consistency
• No additional license fees for multiple
Mediation Engines
– Licenses are based on number of network wide
concurrent calls

Business Mobile Residential

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 61


Deployment Considerations
Dimensioning Essentials

Network-wide Indicators Site-local Information Configuration Requirements


• Registrations (count, time interval) • Name • Retention Period
(Calls, Registrations, KPIs, RT(C)P, PI)
• Calls (volume, traffic characteristics) • Network specs (BW, latency)
• Signaling Traffic • Signaling Traffic volume • Access Setup
(users, realms, alerts)
• Protocols • Per protocol (Mb/s)
• Deployment Options (HA)
• Segments/call • Packet Inspection
• Authentication • Media Traffic volume
• Encryption • Peak BW Target Network Topology
• Media Traffic • RTP vectors/stream
• Architecture layout
• Codecs • Tapping Interfaces (geographical sites, LB)
• RTP streams/call • Network Devices • Call Flow
• Encryption • Core Nodes (site limited versus widespread)
• RTP Recording • SIP Trunks / Peering • Traffic Estimation (diagrams)

Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 62


Deployment Considerations
Dimensioning Traffic Characteristics - Signaling

Signaling Traffic VoIP Network


Alice Bob
• Segment
• Delimited by 2 successive
nodes on the signaling path
of the call ENUM
Segment
• Includes all the signaling 1

session messages that travel SIP SIP SIP SIP 1 Call


between 2 consecutive nodes Segment
1
Segment
2
Segment
3
Segment
4 =
6 segments
H248
• Signaling Protocols Segment
1

• SIP, ENUM, MGCP, H.248

• Call = ∑ Signaling Segments

Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 63
Deployment Considerations
Dimensioning Traffic Characteristics - Media

Media Traffic VoIP Network


Alice Bob
• Vector
• Delimited by 2 successive
nodes on the media path of
Signaling Flows
the RTP stream
• Directed from one node to
another (unidirectional)
• Includes all the RTP packets RTP RTP RTP RTP

that travel from one node to


Vector Vector Vector Vector 1 RTP
1 2 3 4
the consecutive one Stream

RTP RTP RTP RTP


Vector Vector Vector Vector 1 RTP
• 1 Stream = ∑ RTP Vectors 4 3 2 1
Stream
• 1 Call = ∑ RTP Streams

Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 64
Deployment Considerations
Security and Administration

• TLS connections from probes to ME Operations Control


Fraud Monitor
– Ensure data privacy and integrity over Monitor
Mediation Engine
Plane Monitor

potentially untrusted networks


MPLS /
• Role bases access controls Cloud/
Internet

– Visibility: Ability to see only certain Oracle


Branch
screens and information such as SBC office
dashboard, registrations, etc. Oracle
SBC
Cisco
CUCM
Oracle
SBC
MPLS /
Cloud/

– Action: Ability to take certain actions HQ


Internet

such as record media or download call Oracle


Branch
details in PCAP format, etc. SBC office

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 65


Agenda

1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 66


System Deployment
OCOM Examples

SMALL MEDIUM LARGE

Concurrent Calls < 1K < 50K > 50K

Location 1 Site >= 1 Site > 1 Site

Deployment Type Lab Network Access Full Picture

Protocols Signaling Only SIP+RTP All Protocols

1 AE
Deployment 1 ME 1 ME / Site
1 {ME + Probe} combined x Embedded Probes / Site x Standalone Probes / Site

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 67


Deployment Options
Probe ME MEC
Platforms Standalone X86_64** X86_64 (HP / SUN) X86_64 (HP / SUN)
Embedded E-SBC
Embedded ECB
Hardware Traffic Types Signaling and Media Signaling and Media Signaling and Media
Capacity* Varies 100K sessions N.A.
(100 legs/session)
Platforms OVM 3.2.7 or later OVM 3.2.7 or later OVM 3.2.7 or later
VMware ESXi 5.1 VMware ESXi 5.1 VMware ESXi 5.1
Virtual Machine Traffic Types Signaling only Signaling only Signaling and Media
Capacity* 2K sessions 50K sessions N.A.
(1 leg/session) (1 leg/session)

* Actual capacity varies by signaling complexity, network size, probe types and other
factors
** HP+NapaTech / SUN+Intel DPDK

Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 68


Simple Software Licensing
Flexible server and virtualized deployment options

Item Description Pricing


OCSM Session License OCSM server license, including Mediation Per 100 sessions
Engine capacity
Probe Software (standalone) Downloadable software for installation on No Charge
COTS hardware
Probe Software (embedded) Included with Oracle SBC and SR No Charge
Software Extensions Mediation Engine Connector Per 100 sessions
REST API capacity
Application Support
CDR Generation
Gateway Control Protocols
Diameter, ENUM, and SIGTRAN Protocols

Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 69


Licensing Guidelines
• Licensing based on concurrent calls Extension Availability

(or TPS for OCCPM) Extension SP SKU

• A single session correlated across Media Quality Extension Available

Application Support Extension Available


many elements counts as one call
REST API Extension Available

• Licenses are network-wide and CDR Generation Extension Available

perpetual Gateway Controls Protocols Extension Available

• License for probe not required Diameter Protocol Extension Available

ENUM Protocol Extension Available

• Since licenses are per call no SIGTRAN Protocol Extension Available

additional licenses are required for Mediation Engine Connector Extension Available

HA deployments

Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 70
Licensing Guidelines (Cont.)
• MEC
– Licensed to the total of concurrent calls
MEC
for all MEs 10k+20k+30k cc

• OCFM
– Requires ME and probes
ME ME ME
– Licensing for OCOM features not 10k cc 20k cc 30k cc
required for standalone OCFM
installation
– If deployed in conjunction with OCOM,
the same concurrent calls must be used
for both

Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 71
Agenda

1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 72


What Makes OCSM Unique?
Differentiators

a constantly evolving software-based solution running on standard server


Innovative hardware, built on modern architecture and bleeding-edge technology.

Intuitive easy-to-use interface, it doesn’t require extensive protocol knowledge.

Extensible
a plug-in interface for apps and remote API for managing new requirements.
& Open

sub-second visualization, analysis and troubleshooting on real-time calls; it


Real-Time doesn’t wait for CDRs or aggregations

the only solution on the market combining communications monitoring,


Exhaustive troubleshooting and fraud analytics.

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 73


What Makes OCSM Unique?
Benefits

Reduces Prevents Saves Improves


operational disruption Time service
costs quality

Enhances Increases Mitigates


reliability customer risks
retention

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 74


What Makes OCSM Unique?
Target Users
Role Session Monitor Capability
Enables non-technical employee to follow troubleshooting script and
Help Desk Personnel either resolve problem or gather analytics to support escalation.

Analyze specific user problems, identify and resolve network device


Network Engineer issues, use historical data to analyze network performance.

Advanced reporting capabilities allow management of a broad range of


Network Manager
network resources and performance metrics.

Manage and plan overall network efficiency and performance. Gather


Network Planner / Architect information to support modeling of expansion and capacity growth.

Ensure overall service levels are met. Monitor overall network health,
Network Operations Head
performance, and availability.

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 75


Competition
Major Players

NETSCOUT EMPIRIX
PROGNOSIS
nGenius xCentrix
- E2E performance monitoring - Detailed media quality reports - Good integration with Avaya
Strengths
- Integration with key vendors - Device maps generation / call - Active testing capabilities

- No truly real-time analysis - Proprietary expensive probes - Proprietary expensive probes


Weaknesses
- High total cost of solution - Nodes not well-integrated - Limited customization

- Slow to update products - Lack of SW-based solution - Uncertain financial stability


Vendor
- Close to Avaya - Limited SP product maturity - Limited addressable market

OCSM - Poor web-based GUI - Lack of flexibility and costly - Lack of flexibility
Comparison - Data collection delay - Useless data processing - Near-real-time KPI reporting

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 76


Key Benefits

Churn Reduction Revenue Protection


• Service experience • SLA verification and
improvement enforcement
OCOM OCFM
• Service quality • Fraudulent activity
increase OCSM detection

Cost Reduction
OCCPM • Employee productivity
improvement
• MTTI & MTTR decrease

Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 77


Customer References

• Over 200 OCSMS customers across the globe


– 70% CSPs (up to 90k CC – Israel)
– 30% Enterprises (up to 80k CC – USA)
• Public customer references:
– Telesphere (UC SP – USA)
– Hipcom (VoIP SP – UK)
– M-Net (IMS-based SP – Germany)
– PTV Telecom (V2oIP SP – Spain)
– And more…
• Non public customer references

Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 78


Case Study: United States VOIP & UC Provider
OC Session Monitor Alternative
Overview
The only other
Session Monitor
 The US-based service provider offers option available was
solves the issue in 5 Wireshark and
VOIP, UC and Cloud services to businesses
minutes with real- manual correlation
across the nation
time, end-to-end across multiple
call correlation PCAPs took 40
minutes
Challenge
 A manager in the network group asks two Session Monitor
employees to solve a network issue reduces MTTR
 The catch: He asks one to use Session by
Monitor and the other must use other
methods 90%
Results

Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 79


Case Study: VOIP Service Provider in the UK

Highly
scalable and Lower
Challenge reliable operating
service expenses
Create wholesale IP communications
services platform:
Results
 Highly scalable New high- Rapid
margin NGN time-to-
 Manageable management market
 Flexible
 Time-saving Session Monitor + SBC

Solution

Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 80


Oracle Communications Session Monitor Product Family
Summary

The Oracle Communications Session Monitor product family consists of three


software products which greatly improve the service provider network monitoring
experience:
• Oracle Communications Operations Monitor – Provides a real-time view on
network performance and allows for pro-actively identifying issues on application
levels and to drill down to the network layer if needed.
• Oracle Communications Control Plane Monitor – Provides advanced monitoring
and troubleshooting features in LTE deployments as well as all relevant statistics for
Diameter usage in roaming and core scenarios.
• Oracle Communications Fraud Monitor – Monitors all calls through the network in
real-time to detect, alert, and prevent malicious behavior

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 81


Oracle Communications Session Monitor Product Family
For More Information

• OC Session Monitor on Oracle.com


– http://www.oracle.com/us/products/ap
plications/communications/network-
session-
monitoring/overview/index.html
• Documentation including
installation, user, and admin guides
– http://docs.oracle.com/cd/E60864_01/i
ndex.htm

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 82


Questions?

Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 83


Safe Harbor Statement
The preceding is intended to outline our general product direction. It is intended for
information purposes only, and may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or functionality, and should not be relied upon
in making purchasing decisions. The development, release, and timing of any features or
functionality described for Oracle’s products remains at the sole discretion of Oracle.

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 84


Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 85

You might also like