01
Choose listening point
Identify the strategic spots (SI core, DMZ, WAN link).
Step 01
Product catalog
Family Réseau
SYLink DPI Mini
DPI probe 2.5 G · 15,000 IPs · 2 years of storage
Passive DPI probe (TAP/SPAN mode) for clinics, EPCIs and mid-size public bodies: 2.5 Gbps RJ45, up to 15,000 IPs, 2 years of compressed network traffic stored locally.
The product, in plain words
What it does SYLink DPI Mini
Passive DPI probe (TAP/SPAN mode) for clinics, EPCIs and mid-size public bodies: 2.5 Gbps RJ45, up to 15,000 IPs, 2 years of compressed network traffic stored locally.
Key takeaway
SYLink DPI Mini — DPI probe 2.5 G · 15,000 IPs · 2 years of storage.
The technical playbook
How to use it
Forensic time machine, 1:350 compressed
SYLink DPI Mini capture chaque paquet, le décode (520 protocoles), enrichit avec un mapping MITRE ATT&CK, puis stocke les métadonnées et un échantillon en mode compressé 1:350. Le moteur de compression est un format binaire propriétaire optimisé pour la reconstruction temporelle.
L'analyse en temps réel détecte les indicateurs de compromission et les remonte vers le portail. L'analyse en différé permet de revenir 2 ans en arrière sur n'importe quel hôte du parc — utile lors d'une découverte d'attaque a posteriori.
Key capabilities
- 2.5 Gbps capture in passive mode
- 1:350 compression on local disk
- Time machine: queries over 2 years of history
- Automatic MITRE ATT&CK mapping
Where the product fits in your topology
Network placement
Sonde déployée en mode passif sur un port SPAN/mirror du switch cœur (ou TAP optique). Elle observe sans couper le trafic — aucun impact sur la production. Capacité 15 000 IP, 2 ans de stockage forensique.
Deployment pipeline
Deployment diagram
Plug in via TAP (recommended) or SPAN port-mirroring. Wired in within minutes, retention configured to your policy.
- 02
TAP / SPAN install
Install a physical TAP or activate port-mirroring on the core switch.
Step 02 - 03
Configuration
Set retention (default 2 years), capture rules, GDPR exclusions.
Step 03 - 04
Validation
Capture test, coverage check against your asset map.
Step 04 - 05
Go-live
Activate alerts, integrate with SIEM, first monthly report.
Step 05
- 01
Choose listening point
Identify the strategic spots (SI core, DMZ, WAN link).
Step 01 - 02
TAP / SPAN install
Install a physical TAP or activate port-mirroring on the core switch.
Step 02 - 03
Configuration
Set retention (default 2 years), capture rules, GDPR exclusions.
Step 03 - 04
Validation
Capture test, coverage check against your asset map.
Step 04 - 05
Go-live
Activate alerts, integrate with SIEM, first monthly report.
Step 05
↓ Integration pipeline — step by step, from scoping to production ↓
Prerequisites
- A physical TAP or a SPAN port on the core switch
- 1U rack with power
- Link to SIEM or SYLink portal (optional)
What you concretely gain
Benefits
- 01
Forensic black box
Stores 2 years of compressed traffic locally (1:350). Reconstruct any incident after the fact.
- 02
Passive mode, zero impact
Connected via TAP / SPAN, alters no flow. No service outage possible if the probe fails.
- 03
GDPR-by-design
Captures metadata and signatures, not clear-text content by default. Strict respect for legal duties.
- 04
Sovereign, on-premise
All data stays on the probe, in your datacenter. No outbound telemetry.
The full datasheet
Specifications
Performance
| Throughput | 2,5 Gbps capture continue |
| Supervised IPs | Jusqu'à 15 000 |
| Storage | 2 ans de trafic compressé 1:350 |
| Disk capacity | 8 To utiles |
Detection
| Signatures | 35 000+ signatures de menaces |
| Applications | 2 500 reconnues |
| Protocols | 520 décodés |
| MITRE ATT&CK | Mapping automatique |
Ports
| Capture | 2× RJ45 2.5G TAP/SPAN |
| Management | 1× RJ45 1G dédié |
| Console | 1× série + 1× IPMI |
| Form factor | Rack 1U |
Built for
Target customers
Private clinic
Time machine to reconstruct an incident on a medical IoT device, HDS compliance.
EPCI / mid-size town
Visibility on pooled traffic, detection of citizen-data exfiltration attempts.
Sovereign secondary sites
Probe deployed at secondary critical-operator sites, supervision relayed to the core.
Test SYLink DPI Mini on your infrastructure
30-minute guided demo, PoC on a pilot perimeter, support by our French teams based in Clermont-Ferrand, Marseille and Rennes.