Predictika · Network security quotes for service providers

An AI sales agent's Allot security quote, checked before it goes out

An AI sales agent prepares a quote for Allot, the network security and intelligence vendor for service providers: Service Gateway platforms (SG-9900-R and SG-Tera III) with NetworkSecure, DNS Secure, HomeSecure, BusinessSecure, OffNetSecure, DDoS Secure and ClearSee analytics, licensed per subscriber, with Gold or Platinum support and the Dedicated ERT Service, for a term of one, three or five years. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the products and platforms Allot publishes and returns a verdict, every reason, a line-item quote and the figures it computed.

Scope: Allot security quotes for service providers: Service Gateway SG-9900-R and SG-Tera III, NetworkSecure, DNS Secure, HomeSecure, BusinessSecure, OffNetSecure, DDoS Secure, ClearSee analytics, Gold and Platinum support and the ERT service, for any subscriber volume, on a 1-, 3- or 5-year term. See everything this validator covers

This validator models Allot service provider security quotes as described on the Allot product pages and datasheets, not just the scenarios shown below.

  • Platforms — the Allot Service Gateway SG-9900-R (up to 750 Gbps and 10 million subscribers per appliance) and the SG-Tera III (more than 2.8 Tbps and 60 million active subscribers per platform), in any quantity.
  • Security and analytics products — NetworkSecure (telcos only), DNS Secure, HomeSecure, BusinessSecure, OffNetSecure, DDoS Secure and ClearSee network analytics, each licensed per subscriber (DDoS Secure per Gbps protected).
  • Support — the Gold and Platinum support plans for the gateways and the Dedicated ERT Service for DDoS incidents.
  • What the validator checks — that each product has what it runs on (NetworkSecure, DDoS Secure and analytics on a gateway; OffNetSecure on top of NetworkSecure or DNS Secure; HomeSecure and BusinessSecure with router integration; the ERT service with DDoS Secure), that subscribers, peak traffic and DDoS capacity fit the gateways quoted, that gateways carry a support plan, that the term is one, three or five years, and that the stated term total matches the computed one.
  • Approvals — a five-year term, a term total above $20 million, gateways loaded above 80 percent of rated capacity, and an SG-Tera III quoted for a peak that one SG-9900-R carries go to a person.

Any Allot service provider quote that touches these platforms and products is in scope — not only the scenarios pictured here. Not covered: the enterprise products (Application Control Gateway, Secure Service Gateway, DDoS Secure for Enterprise), the other Smart products (SmartPCC, Smart5G, SmartSentinel and others), virtual editions, professional services, taxes and negotiated discounts. Allot publishes no prices, so every price on this page is illustrative.

The AI sales agentBuilds the Allot quote from the conversation with the operator and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

7 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      

        
        
        
      

      
Waiting for the call.

      
    

  

  
  

    
Where rules-based CPQ gets it wrong
Click to expand
    
Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

    
What the validator caughtTypical rules-based CPQPredictika
Products that only run on a gatewayOnly with care
NetworkSecure, DDoS Secure and the analytics all run on a Service Gateway; a rep who picks products can leave the gateway off, and it takes a product rule for each product to catch it.		The products and the gateways are in one request and each product is checked against the gateways quoted.
Capacity that depends on the platformOnly with workarounds
One SG-9900-R holds 10 million subscribers and 750 Gbps and one SG-Tera III holds 60 million and 2,800 Gbps; comparing subscribers, peak traffic and DDoS capacity with the gateways quoted needs a calculated field per platform and a validation rule per limit.		Subscribers, peak traffic and DDoS capacity are compared with the capacity of the platform and quantity quoted on every call.
Per-subscriber prices that change with the termOnly with workarounds
Every product has a rate for one, three and five years, and the stated total has to follow; that is a price table per product per term, kept in step by hand.		The rate is chosen from the term for every product and the term total is compared with the stated figure in the same pass.
Add-ons that sit on other productsOnly with care
OffNetSecure sits on top of NetworkSecure or DNS Secure and the ERT service goes with DDoS Secure; each dependency is a rule someone has to write and keep current, and the subscriber limit is a calculation.		Each add-on is checked against the products it depends on, including the subscriber counts, in one pass.
Agent-based products need the router integrationOnly with care
HomeSecure and BusinessSecure run as an agent on the operator's routers; a question can be added to the quote, but nothing stops a quote going out with the answer left open.		The integration status is part of the request and the products are blocked until it is confirmed.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the quote is saved or a step is completed, so a rep often fixes one error and meets the next.		All findings come back together, whatever order the choices arrived in.

  

  

    
What this validator catches: findings from its test cases
Click to expand
    
Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

    
1The term total is $26,916,000, above $20 million, so a person should confirm.
2The quote uses the SG-Tera III for a peak of 700 Gbps, which one SG-9,900-R carries, so a person should confirm the platform choice.
3The quote includes OffNetSecure for 1.001 million subscribers, but OffNetSecure sits on top of NetworkSecure or DNS Secure, and those cover 1 million subscribers in this quote.
4The quote has a 5-year term, a long price commitment, so a person should confirm.
5The quote has a term of 2 years; the licenses and support are quoted for 1, 3 or 5 years.
6The quote includes NetworkSecure for 2 million subscribers, which runs on an Allot Service Gateway, and the quote includes no gateway.
7The quote includes NetworkSecure for 2 million subscribers, but NetworkSecure is available to telcos only and the operator is not a telco.
8The quote includes ClearSee analytics for 1.5 million subscribers, which takes its data from an Allot Service Gateway, and the quote includes no gateway.
9The quote includes DDoS Secure for 200 Gbps, which runs on an Allot Service Gateway, and the quote includes no gateway.
10The quote loads the gateways (quantity 1) above 80 percent of their rated subscribers or throughput, which leaves little room to grow, so a person should confirm.
11The quote puts NetworkSecure on 10.001 million subscribers with a gateway quantity of 1; each gateway of the chosen platform holds up to 10 million active subscribers.
12The quote puts ClearSee analytics on 10.001 million subscribers with a gateway quantity of 1; each gateway of the chosen platform holds up to 10 million active subscribers.
13The operator has a peak traffic of 751 Gbps, and with a gateway quantity of 1 each gateway of the chosen platform carries up to 750 Gbps.
14The quote protects 751 Gbps with DDoS Secure, but with a gateway quantity of 1 each gateway of the chosen platform carries up to 750 Gbps.
15The quote includes HomeSecure and BusinessSecure for 540 thousand subscribers, which run as an agent on the operator routers, and the router integration is not confirmed.
16The quote includes Service Gateway hardware (quantity 1) with no Gold or Platinum support plan.
17The quote includes the Dedicated ERT Service, which responds to DDoS attack incidents, and the quote includes no DDoS Secure.
18The quote includes no Allot product, so there is nothing to price.
19The quote states a term total of $5,899,199; the prices give $5,899,200.

  

  

    
Scenarios and results
Click to expand
    
The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

    
1. Mobile operator, 3.5 million subscribers: A quote for a mobile operator's security bundle on one SG-9900-R gateway

    
The agent's request. Please quote Allot for an operator on a 3-year term, with 1 SG-9900-R gateway, NetworkSecure for 3,500,000 subscribers, OffNetSecure for 1,200,000 subscribers, ClearSee analytics for 3,500,000 subscribers and DDoS Secure for 600 Gbps. The operator has a peak traffic of 900 Gbps. The quote states $5,820,000 over the term. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Peak traffic exceeds gateway throughput. The operator has a peak traffic of 900 Gbps, and with a gateway quantity of 1 each gateway of the chosen platform carries up to 750 Gbps.
    • 
      
  • Gateways need a support plan. The quote includes Service Gateway hardware (quantity 1) with no Gold or Platinum support plan.
    • 
      
  • Stated total does not match. The quote states a term total of $5,820,000; the prices give $15,822,000.
    • 
      
  • Gateways loaded above 80 percent. The quote loads the gateways (quantity 1) above 80 percent of their rated subscribers or throughput, which leaves little room to grow, so a person should confirm.
    • 
    

    
2. Mobile operator, 3.5 million subscribers: The agent resubmits after fixing the errors

    
The agent's request. Please quote Allot for an operator on a 3-year term, with 2 SG-9900-R gateways with Gold support, NetworkSecure for 3,500,000 subscribers, OffNetSecure for 1,200,000 subscribers, ClearSee analytics for 3,500,000 subscribers and DDoS Secure for 600 Gbps. The operator has a peak traffic of 900 Gbps. The quote states $16,820,400 over the term. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Quote summary. Hardware of $960,000, annual charge of $5,286,800 and a term total of $16,820,400.
    • 
    

    
3. Broadband provider, home and business security: A quote for a broadband provider with home, business and off-net security and the ERT service

    
The agent's request. Please quote Allot for an operator on a 3-year term, with DNS Secure for 900,000 subscribers, HomeSecure for 800,000 subscribers, BusinessSecure for 60,000 subscribers, OffNetSecure for 1,500,000 subscribers and the Dedicated ERT Service. The quote states $5,067,000 over the term. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • OffNetSecure exceeds the protected base. The quote includes OffNetSecure for 1.5 million subscribers, but OffNetSecure sits on top of NetworkSecure or DNS Secure, and those cover 900 thousand subscribers in this quote.
    • 
      
  • Home and business security need the CPE agent. The quote includes HomeSecure and BusinessSecure for 860 thousand subscribers, which run as an agent on the operator routers, and the router integration is not confirmed.
    • 
      
  • ERT service needs DDoS Secure. The quote includes the Dedicated ERT Service, which responds to DDoS attack incidents, and the quote includes no DDoS Secure.
    • 
      
  • Stated total does not match. The quote states a term total of $5,067,000; the prices give $5,427,000.
    • 
    

    
4. Broadband provider, home and business security: The agent resubmits after fixing the errors

    
The agent's request. Please quote Allot for an operator on a 3-year term, with DNS Secure for 1,600,000 subscribers, HomeSecure for 800,000 subscribers, BusinessSecure for 60,000 subscribers, OffNetSecure for 1,500,000 subscribers and the Dedicated ERT Service. The quote states $6,225,000 over the term. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • ERT service needs DDoS Secure. The quote includes the Dedicated ERT Service, which responds to DDoS attack incidents, and the quote includes no DDoS Secure.
    • 
    

    
5. Broadband provider, home and business security: The agent resubmits after fixing the errors

    
The agent's request. Please quote Allot for an operator on a 3-year term, with DNS Secure for 1,600,000 subscribers, HomeSecure for 800,000 subscribers, BusinessSecure for 60,000 subscribers and OffNetSecure for 1,500,000 subscribers. The quote states $5,865,000 over the term. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Quote summary. No gateway hardware, annual charge of $1,955,000 and a term total of $5,865,000.
    • 
    

    
6. Tier-1 carrier, 12 million subscribers: A quote for a tier-1 carrier with security and analytics on one SG-Tera III

    
The agent's request. Please quote Allot for an operator on a 4-year term, with 1 SG-Tera III gateway, NetworkSecure for 12,000,000 subscribers, ClearSee analytics for 12,000,000 subscribers and DDoS Secure for 1,200 Gbps. The operator has a peak traffic of 2,100 Gbps. The quote states $48,606,000 over the term. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Term is not 1, 3 or 5 years. The quote has a term of 4 years; the licenses and support are quoted for 1, 3 or 5 years.
    • 
      
  • Gateways need a support plan. The quote includes Service Gateway hardware (quantity 1) with no Gold or Platinum support plan.
    • 
      
  • Stated total does not match. The quote states a term total of $48,606,000; the prices give $61,704,000.
    • 
      
  • Term total over $20 million. The term total is $61,704,000, above $20 million, so a person should confirm.
    • 
    

    
7. Tier-1 carrier, 12 million subscribers: The agent resubmits after fixing the errors

    
The agent's request. Please quote Allot for an operator on a 5-year term, with 1 SG-Tera III gateway with Platinum support, NetworkSecure for 12,000,000 subscribers, ClearSee analytics for 12,000,000 subscribers and DDoS Secure for 1,200 Gbps. The operator has a peak traffic of 2,100 Gbps. The quote states $74,940,000 over the term. It is ready to send.

    
Verdict: Needs approval.

    
    
      
  • Five-year term. The quote has a 5-year term, a long price commitment, so a person should confirm.
    • 
      
  • Term total over $20 million. The term total is $74,940,000, above $20 million, so a person should confirm.
    • 
      
  • Quote summary. Hardware of $2,400,000, annual charge of $14,508,000 and a term total of $74,940,000.
    • 
    

  

  

    
Narration transcript
Click to expand
    
The text of the narrated walkthrough, step by step.

    
    
      
  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares a quote for Allot, the network security and intelligence vendor for service providers: Service Gateway platforms (SG-9900-R and SG-Tera III) with NetworkSecure, DNS Secure, HomeSecure, and more. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the products and platforms Allot publishes and returns a verdict, every reason, a line-item quote and the figures it computed.
    2. 
      
  2. I will start with the first request by the agent.
    3. 
      
  3. The agent says. Please quote Allot for an operator on a 3-year term, with DNS Secure for 900,000 subscribers, HomeSecure for 800,000 subscribers. The quote states $5,067,000 over the term. The rest of the request is on screen.
    4. 
      
  4. Before it goes out, the agent calls the validator.
    5. 
      
  5. Blocked, with four findings, all in one answer. The quote includes OffNetSecure for 1.5 million subscribers, but OffNetSecure sits on top of NetworkSecure or DNS Secure, and those cover 900 thousand subscribers in this quote. The quote includes HomeSecure and BusinessSecure for 860 thousand subscribers, which run as an agent on the operator routers, and the router integration is not confirmed. The quote includes the Dedicated ERT Service, which responds to DDoS attack incidents, and the quote includes no DDoS Secure. The other one is on screen.
    6. 
      
  6. The validator returned four blocking findings in one answer. A check that reads one field at a time would pass most of this; it shows only when the choices in the quote are checked against each other and against the stated total.
    7. 
      
  7. What this shows: for agent-based products need the router integration, a rules-based CPQ is error-prone for this.
    8. 
      
  8. Now the agent resubmits.
    9. 
      
  9. The corrected request. It changes the DNS Secure subscribers to 1600000, the router integration to confirmed and the stated term total to $6,225,000.
    10. 
      
  10. It calls the validator again.
    11. 
      
  11. Still blocked, with one finding, all in one answer. The quote includes the Dedicated ERT Service, which responds to DDoS attack incidents, and the quote includes no DDoS Secure.
    12. 
      
  12. Three findings cleared. Still blocking: ERT service needs DDoS Secure.
    13. 
      
  13. The agent resubmits once more.
    14. 
      
  14. The revised request. It changes the stated term total to $5,865,000. It removes the Dedicated ERT Service.
    15. 
      
  15. It calls the validator once more.
    16. 
      
  16. This time the validator clears it.
    17. 
      
  17. The validator also returns the line-item quote. It starts with Allot DNS Secure and Allot HomeSecure; the other two lines are on screen.
    18. 
      
  18. The earlier finding is cleared, and the validator's total, $5,865,000, matches the quote.
    19. 
      
  19. Four problems caught in one call, fixed in two passes, and a clean $5,865,000 quote. That is the value of Predictika's validator: catching mistakes before they reach the customer. Now you can try the other scenarios yourself.
    20.