Turning Network Intelligence into Actionable Data
MEDIATION LAYER
Large networks process terabytes of data per day, but raw data alone isn't valuable until it’s transformed into structured, standardized, and actionable information. This is where the Mediation Layer comes in. It sits between the DPI engine and your downstream systems - normalizing, enriching, and distributing intelligence to the relevant stakeholders.
What is the Mediation Layer?
Our data processing framework transforms raw DPI output into structured, policy-compliant information ready for real-time decision-making. From normalization and enrichment to targeted filtering and secure distribution, the Mediation Layer ensures that actionable insights reach the right systems while meeting compliance, privacy, and operational requirements.
1. Data Normalization & Structuring
● Converts raw DPI output into structured formats like xDRs (e.g., IPDRs, GTPDRs, VoIP CDRs), JSON, XML, or CSV.
● Supports protocol mapping and field-level customization for compliance or specific integration needs.
2. Data Filtering & Policy Enforcement
● Applies collection and delivery rules based on:
◦ User/subscriber IDs
◦ Application types
◦ Time of day
◦ Geolocation or access network
● Ensures only relevant, policy-compliant data is forwarded - critical for lawful intercept and privacy compliance.
3. Enrichment & Correlation
● Enriches DPI records with:
◦ Subscriber metadata (e.g., IMSI, MSISDN, user plan)
◦ Device information
◦ Geo-location and ASN
◦ Timezone, cell ID, or gateway info
● Cross-correlates sessions across different access types (mobile + fixed + satellite).
4. Distribution to External Systems
● Interfaces with downstream systems like:
◦ Lawful Interception & Retention Platforms
◦ National Security Authorities
◦ Billing/Charging/Policy Systems (BSS/OSS)
◦ SIEM/SOC and Threat Intelligence Tools
◦ Custom Dashboards or Data Lakes
● Uses standard protocols • REST, Kafka, FTP/SFTP, Syslog, SNMP, gRPC, etc.
From Deep Packet Inspection to Real-World Intelligence
Key Benefits
Flexible Output Formats
• Seamless integration with diverse systems and partners
Real-Time and Batch Modes
• Immediate alerting or periodic reporting options
Policy-Aware Data Delivery
• Only the correct data reaches the right system - ensuring compliance
Scalability
• Handles millions of records per second across national-scale networks
Customizable Pipelines
• Tailor the mediation process to specific operator, LEA, or government requirements.
Secure, Compliant, and Auditable
• End-to-end encryption for sensitive data in motion.
• Access control and logging for regulatory and forensic purposes.
• Time-stamping and digital signatures to ensure non-repudiation (optional, depending on compliance needs).
Designed for Complex Environments
Quant Azimuth understands the reality of hybrid, multi-domain infrastructures. That’s why our Mediation Layer is:
Vendor-agnostic
• Works with third-party DPI engines or collection probes.
Protocol-flexible
• Adapts to telecom, enterprise, and government data models.
Legally aligned
• Built to support ETSI LI standards, data retention directives, and national cybersecurity regulations.
Use Cases
The Mediation Layer is your DPI platform’s voice - translating complex traffic intelligence into the language your systems, partners, and regulators understand. It’s where raw insight becomes operational power.
Lawful Interception
• Deliver targeted, policy-compliant DPI records to LEA platforms.
National Data Retention
• Format and route historical metadata to centralized archives.
Telco Billing
• Feed application-level usage data to charging systems for usage-based billing.
Cybersecurity
• Forward enriched network telemetry to SIEMs or national threat detection centers.
