Traffic Analysis & Enforcement

nTopNG Edge

Protect Your Digital Assets and Online Activities

Protect Your Assets

  • Make the Network a Safe Place Again

    nTopNG Edge keeps your Internet available for business-critical applications by preventing misbehaving hosts from hogging bandwidth. It also protects your network against unwanted traffic, like torrents and cloud uploads, that could lead to data breaches.

  • Ensured Internet Availability

    nTopNG Edge enables network administrators to manage complex networks efficiently by accurately controlling and prioritizing Internet access for connected devices. Its intuitive web-based interface allows administrators to quickly allocate and regulate available bandwidth, easily enforcing maximum upload and download limits for individual devices in just a few clicks.

  • Layer-7 Applications Traffic Blocking/Throttling

    Protecting networks from unwanted application traffic is challenging, especially with internal policies and external regulations limiting access. Are you frustrated by employees using cloud services, downloading copyrighted content, or wasting work hours on recreational sites? nTopNG Edge enforces policies to block or throttle Layer-7 traffic without costly network changes or equipment conflicts.

  • Inline Unsafe Traffic Blocking

    nTopNG Edge combines safe DNS with comprehensive IP and domain lists to deliver continuous network protection. It automatically detects and blocks communication attempts involving malicious hosts—whether incoming or outgoing—and generates immediate alerts. For real-time threat notifications, simply integrate Slack to receive instant updates directly on your smartphone.

  • Service Micro-Segmentation

    With service micro-segmentation, administrators create policies that explicitly permit only authorized network traffic. Security policies are tailored individually for each host, based on its specific role and function. Using this zero-trust security model, nTopNG Edge enables precise enforcement—for instance, restricting IoT sensors exclusively to MQTT communication, or ensuring web servers only use HTTP/HTTPS with clients and MySQL with backend databases.

  • Active and Silent Devices Discovery

    nTopNG Edge automatically discovers and accurately categorizes all devices connected to the network, including silent ones. It provides detailed device information such as type, family, and—when possible—specific model and operating system. Additionally, nTopNG Edge continuously monitors for newly connected devices, promptly alerting administrators whenever unknown devices join the network.

Available Versions

Feature Professional Enterprise
Ensured Internet Availability
Enforce the maximum download/upload bandwidth
Guarantee the minimum download/upload bandwidth
Layer-7 Applications Traffic Blocking/Throttling
Enforce policies on the basis of Layer-7 applications traffic
Define per-user and per-Layer-7 application time and traffic quotas
Inline Unsafe Traffic Blocking
Industry’s leading cyber-security companies IP and domains lists
Enable the use of Child-Safe DNS
Secure DNS to block malicious domains
Captive Portal
Identify and associate users with physical devices through a login page
Grant Internet access only to authorized users
Bridge Mode
Create a bridge between two network interfaces, one connected to a LAN and the other to a WAN
Router Mode
Route the traffic coming from an interface connected to a LAN towards one or more WAN interfaces
Define routing policies to be applied on a per-user basis (e.g., premium users via SAT and basic users via WiFi)
Failover
Constantly monitor Internet reachability and automatically exclude gateways that can no longer access the Internet
Load Balancing
Balance the traffic to spread the traffic going to the Internet across multiple gateways

Use Cases

SMEs

SMEs often struggle to protect their networks from unwanted Layer-7 application protocols. Internal rules or external regulations may impose limits on the websites visited as well as on the Layer-7 application protocols used in the network. nTopNG Edge helps SMEs by restricting the use of unauthorized/unwanted traffic, including that towards recreational sites and social networks.

Internet Access Providers

Hotels, bars and restaurants, malls, and more in general public places, almost always provide complimentary or paid internet access. nEdge helps in protecting business-critical operations by automatically identifying normal guests and staff people and devices, and prioritizing their traffic according to different policies.

Multi-WAN Providers

nEdge features advanced functionalities specifically designed for multi-homed Internet access providers, characterized by the presence of a number of Internet gateways with different speeds and costs (e.g. WiFi, 3G, SAT). Powerful policies can be implemented to route the traffic towards one or more gateway on the basis of the user type (e.g., premium vs basic).

License

Licensee’s use of this software is conditioned upon acceptance of the terms specified by ntop.

Operating Systems

Ubuntu Linux 20 LTS Only