SessionMonitorProductFamily Level 2 WithAudio
SessionMonitorProductFamily Level 2 WithAudio
SessionMonitorProductFamily Level 2 WithAudio
Vivek Bhargava
Director, Product Marketing, Service Provider Networks
Communications Global Business Unit
October, 2015
1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways
Tools designed to
capture all network Tools used to generate Freeware designed to
traffic (usually Layer 1- synthetic calls, for the capture and analyze
3) and/or SNMP and purposes of load testing, PCAPs Tools, like OCSM, that
provide aggregated path validation, or are designed
stats Tools provided along
quality specifically to analyze
with UC solutions for
Tools designed for and report on real-
Tools that can see traffic basic analysis (“free”
generic app time communications
through an SBC, like as often given away in
performance (i.e. VOIP AudioCodes SEM a larger deal)
= just another app)
*APM = Application Performance Management
On-demand correlation
• Probes Aggregation Engine Global KPIs
– Standalone MEC OCFM Fraud Analysis
SIP Peering
S-CSCF S-CSCF SBC
I- PSTN
P-CSCF SBC SS7 SS7
CSCF
GW
Cloud
IMS Core
• Functions
– Capture traffic
– Analyze media quality
– Calculate MOS, R-Factor, packet loss, etc.
– Send data on signaling and media quality to ME
– Connects via port-mirroring features of network switches
• Hardware
– For small installations, may be collocated with ME
– Standalone: Debian or Oracle Linux 64-bit based COTS (Intel x86 64-bit compatible) or Sun
hardware
– Integrated with OCSBC or OCSR: Required for encrypted signaling traffic
1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways
• Configurable
dashboards
• Alerts settings
• Traces generation
• Apps scripting
• Operations
management
• Customers management
• Data collection
– Dashboards
– CDRs & MDRs (CSV)
– Call reports (HTML & PDF)
– Packet captures (PCAP)
• Data export
– SNMP
– (S)FTP (CSV)
– REST API (JSON)
– App (CSV)
• Real-time packet
capture
• Centralized packet
analysis
– TShark display filters
– L2 to L7 inspection
• Everything but RTP
Media Quality Enables processing of both media streams (RTP) and RTCP reports
Application Support Supports customer specific apps to extend the base functionality
REST API Provides an open interface for 3rd party apps to access real-time and historic
data
CDR Generation Generates CDRs from end-to-end correlated calls. These CDRs have a lot
more information than just that necessary for billing
Protocols Additional signaling protocols such as H.248, SIGTRAN, ENUM, and
Diameter
Mediation Engine Connector Increases scalability by providing a single dashboard for multiple Mediation
Engines
1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways
Software-based solution
Software running on COTS
Software probes are free
Web-based architecture
Intuitive and simple GUI
No agents or Java packages to install
• Location management
S6a MME – HSS • Subscriber data handling
• Authentication
S6 • Fault recovery
• Notification
S6d SGSN – HSS
• Configurable dashboards
• Alerts settings
• Apps scripting
• CPM management
• Pre-defined metrics
• KPIs aggregation (core device)
• Export (SNMP, REST API, Apps)
• Data collection
– Dashboards
– TDRs (CSV)
– Transaction reports (HTML)
– Packet captures (PCAP)
• Data Export
– SNMP
– (S)FTP (CSV)
– REST API (JSON)
– App (CSV)
1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways
PBX Voicemail
hacking hacking
• Voicemail features
– Customers leave messages
– Subscribers listen to messages
– Call-back
– Call-through
• Fraudsters abuse call-through feature
• When call-through is forbidden call-back might be used
– Leave voicemail with spoofed (foreign) number
– Log in, listen to message, use ‘call back’
Money flow:
Subscribers pay bill to phone operator Operator pays fraudster
• Uses data gathered from probes and reported through Mediation Engine
• Applies rules to every reported call, and collects a score if rule is executed
• Triggers alerts based on score accumulated due to rule executions
Standalone Real-time
data
probe
Mediation Call data Alerting
OCFM Alert
Engine
OCSBC built-
in probe
• Per-destination behavior
• Scoring history
Real-time monitoring
Blacklists based on source and destination DN, IP address, phone number
range
Fraud detection in NGN
System flexibility & scalability
• Alerts raised
• Suspected user
details
• Suspected calls
history
• Destination-based traffic
spikes
• Static metrics
– Based on absolute numbers
• Dynamic metrics
– Based on deviation from learned
behaviors
• Tracking based on
subscriber
• Call details per
subscriber
65 seconds between
• Message flow successful break-in
and abuse
analysis
• Traffic reporting
• OCDM integration
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 50
Agenda
1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways
• OCFM
Aggregation Engine
• OCOM MEC
• OCOM
Mediation Engine
• OCCPM
• Probe Probe
OCFM MEC
Capture Layer
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 53
System Architecture
Logical View
VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC
I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core
SBC
Next Generation Network
VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC
I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core
OCOM
Mediation Engine
VoIP
Carriers
GMSC SGW MGC
Diameter VoIP
Transaction Carriers
STP DSC
HSS
SIP Peering
S-CSCF S-CSCF SBC
I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core
OCOM OCOM
I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core
Aggregation Engine
OCOM OCOM
I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core
Aggregation Engine
OCOM OCCPM
I- PSTN
P-CSCF SBC SS7 SS7
CSCF Cloud
GW
IMS Core
Deployment Considerations
High Availability
• Active – Active configurations can be created
using separate hardware
– REST-API enables ME pair configuration REST-API
Probe
synchronization
– Probes connected to multiple MEs ensure data
consistency
• No additional license fees for multiple
Mediation Engines
– Licenses are based on number of network wide
concurrent calls
Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 63
Deployment Considerations
Dimensioning Traffic Characteristics - Media
Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 64
Deployment Considerations
Security and Administration
1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways
1 AE
Deployment 1 ME 1 ME / Site
1 {ME + Probe} combined x Embedded Probes / Site x Standalone Probes / Site
* Actual capacity varies by signaling complexity, network size, probe types and other
factors
** HP+NapaTech / SUN+Intel DPDK
additional licenses are required for Mediation Engine Connector Extension Available
HA deployments
Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 70
Licensing Guidelines (Cont.)
• MEC
– Licensed to the total of concurrent calls
MEC
for all MEs 10k+20k+30k cc
• OCFM
– Requires ME and probes
ME ME ME
– Licensing for OCOM features not 10k cc 20k cc 30k cc
required for standalone OCFM
installation
– If deployed in conjunction with OCOM,
the same concurrent calls must be used
for both
Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 71
Agenda
1 Overview
2 Oracle Communications Operations Monitor
3 Oracle Communications Control Plane Monitor
4 Oracle Communications Fraud Monitor
5 Deployment Considerations
6 System Requirements
7 Summary and Key Takeaways
Extensible
a plug-in interface for apps and remote API for managing new requirements.
& Open
Ensure overall service levels are met. Monitor overall network health,
Network Operations Head
performance, and availability.
NETSCOUT EMPIRIX
PROGNOSIS
nGenius xCentrix
- E2E performance monitoring - Detailed media quality reports - Good integration with Avaya
Strengths
- Integration with key vendors - Device maps generation / call - Active testing capabilities
OCSM - Poor web-based GUI - Lack of flexibility and costly - Lack of flexibility
Comparison - Data collection delay - Useless data processing - Near-real-time KPI reporting
Cost Reduction
OCCPM • Employee productivity
improvement
• MTTI & MTTR decrease
Highly
scalable and Lower
Challenge reliable operating
service expenses
Create wholesale IP communications
services platform:
Results
Highly scalable New high- Rapid
margin NGN time-to-
Manageable management market
Flexible
Time-saving Session Monitor + SBC
Solution