Version:

Version:

Version:

Version:

Version:


Table of Contents

FortiOS Carrier

FortiOS Carrier features

FortiOS Carrier supports all standard FortiOS features including SCTP firewalling. FortiOS Carrier adds the following additional features, specific to FortiOS Carrier:

  • Protection for Packet Forwarding Control Protocol (PFCP) in 4G Control-User Plane Separation (CUPS) and 5G signaling evolution networks. When PFCP is used as the control plane, the user plane is GTPv1-U. FortiOS Carrier uses a session helper to monitor PFCP traffic. The PFCP session helper must be enabled for PFCP protection to work. FortiOS Carrier can be installed in a wide variety of locations in any PFCP network to apply various types of PFCP protection depending on traffic and security needs, including:

    • Message filtering.
    • Monitoring.
    • PFCP protocol anomaly detection.
  • Protection for GTPv0, GTPv1, and GTPv2 traffic in 2G, 3G, 4G, and 5G carrier networks. FortiOS Carrier can be installed in a wide variety of locations in any GTP network to apply various types of GTP protection depending on traffic and security needs, including:
    • GTP tunnel limiting.
    • APN traffic filtering.
    • Message filtering.
    • Message rate limiting.
    • Various other methods of filtering GTP traffic based on content, addresses, technology, and so on.
    • GTP protocol anomaly detection.
    • Information element (IE) validation and removal.
    • Encapsulated IP traffic filtering.
    • Anti-overbilling protection.
    • RAT timeout filtering.

FortiOS Carrier features

FortiOS Carrier supports all standard FortiOS features including SCTP firewalling. FortiOS Carrier adds the following additional features, specific to FortiOS Carrier:

  • Protection for Packet Forwarding Control Protocol (PFCP) in 4G Control-User Plane Separation (CUPS) and 5G signaling evolution networks. When PFCP is used as the control plane, the user plane is GTPv1-U. FortiOS Carrier uses a session helper to monitor PFCP traffic. The PFCP session helper must be enabled for PFCP protection to work. FortiOS Carrier can be installed in a wide variety of locations in any PFCP network to apply various types of PFCP protection depending on traffic and security needs, including:

    • Message filtering.
    • Monitoring.
    • PFCP protocol anomaly detection.
  • Protection for GTPv0, GTPv1, and GTPv2 traffic in 2G, 3G, 4G, and 5G carrier networks. FortiOS Carrier can be installed in a wide variety of locations in any GTP network to apply various types of GTP protection depending on traffic and security needs, including:
    • GTP tunnel limiting.
    • APN traffic filtering.
    • Message filtering.
    • Message rate limiting.
    • Various other methods of filtering GTP traffic based on content, addresses, technology, and so on.
    • GTP protocol anomaly detection.
    • Information element (IE) validation and removal.
    • Encapsulated IP traffic filtering.
    • Anti-overbilling protection.
    • RAT timeout filtering.