Version:

Version:

Version:

Version:


Table of Contents

FortiOS Carrier

Download PDF
Copy Link

FortiOS Carrier features

FortiOS Carrier supports all standard FortiOS features including SCTP firewalling. FortiOS Carrier adds the following additional features, specific to FortiOS Carrier:

  • Protection for Packet Forwarding Control Protocol (PFCP) in 4G Control-User Plane Separation (CUPS) and 5G signaling evolution networks. When PFCP is used as the control plane, the user plane is GTPv1-U. FortiOS Carrier uses a session helper to monitor PFCP traffic. The PFCP session helper must be enabled for PFCP protection to work. FortiOS Carrier can be installed in a wide variety of locations in any PFCP network to apply various types of PFCP protection depending on traffic and security needs, including.
    • Message filtering.
    • Monitoring.
    • PFCP protocol anomaly detection.
  • Protection for GTPv0, GTPv1, and GTPv2 traffic in 2G, 3G, 4G, and 5G carrier networks. FortiOS Carrier can be installed in a wide variety of locations in any GTP network to apply various types of GTP protection depending on traffic and security needs, including:
    • GTP tunnel limiting.
    • APN traffic filtering.
    • Message filtering.
    • Message rate limiting.
    • Various other methods of filtering GTP traffic based on content, addresses, technology, and so on.
    • GTP protocol anomaly detection.
    • Information element (IE) validation and removal.
    • Encapsulated IP traffic filtering.
    • Anti-overbilling protection.
    • RAT timeout filtering.

FortiOS Carrier features

FortiOS Carrier supports all standard FortiOS features including SCTP firewalling. FortiOS Carrier adds the following additional features, specific to FortiOS Carrier:

  • Protection for Packet Forwarding Control Protocol (PFCP) in 4G Control-User Plane Separation (CUPS) and 5G signaling evolution networks. When PFCP is used as the control plane, the user plane is GTPv1-U. FortiOS Carrier uses a session helper to monitor PFCP traffic. The PFCP session helper must be enabled for PFCP protection to work. FortiOS Carrier can be installed in a wide variety of locations in any PFCP network to apply various types of PFCP protection depending on traffic and security needs, including.
    • Message filtering.
    • Monitoring.
    • PFCP protocol anomaly detection.
  • Protection for GTPv0, GTPv1, and GTPv2 traffic in 2G, 3G, 4G, and 5G carrier networks. FortiOS Carrier can be installed in a wide variety of locations in any GTP network to apply various types of GTP protection depending on traffic and security needs, including:
    • GTP tunnel limiting.
    • APN traffic filtering.
    • Message filtering.
    • Message rate limiting.
    • Various other methods of filtering GTP traffic based on content, addresses, technology, and so on.
    • GTP protocol anomaly detection.
    • Information element (IE) validation and removal.
    • Encapsulated IP traffic filtering.
    • Anti-overbilling protection.
    • RAT timeout filtering.