Don't really need DPI to detect services and protocol patterns, just a decent perimeter device which almost everyone has.

Ex. Tons of UDP streaming from an endpoint to a cloud box sticks out like a sore thumb using little to no special detection magic.