"The infringing functionality was added to their accused products post June 20, 2017, and resulted in a dramatic increase in sales which Cisco touted in both technical and marketing documents," he added.
Looks like “Encrypted Traffic Analytics” is the functionality in question.