FortiOS Carrier

• FortiOS Carrier
  • What's new for FortiOS Carrier 7.2.1
  • FortiOS Carrier licensing
  • FortiOS Carrier features
• FortiOS Carrier PFCP protection
  • PFCP session helper
  • PFCP matching and actions
  • Data forwarding between CP and UP
  • PFCP diagnose commands
• Configuring PFCP profiles
  • Configuring PFCP message filters
• PFCP messages
  • Node related messages
  • PFCP session messages
  • Other messages
• FortiOS Carrier GTP protection
  • FortiOS Carrier in your GTP network
  • GTPv2 - evolving packet core architecture
  • FortiOS Carrier and GTPv1 networks
  • PDP context
    • Creating a PDP context
    • Terminating a PDP context
  • GPRS security
    • GPRS authentication
  • Radio access
  • Transport protocols
    • GTP
    • GTPv0
    • GTPv1
    • GTPv1-C
    • GTPv1-U
    • GGSN
    • SGSN
    • GTPv2 / GTPv2-C
    • MME
  • Billing and records
    • GTP’ (GTP prime)
    • HLR
    • HSS
    • VLR
  • GPRS network common interfaces
  • GTP as a Potential Attack Vector
    • Protecting Against GTP-Based Attacks: The Carrier Grade GTP Firewall
    • FortiOS Carrier GTP and PFCP protection
  • Packet sanity checking
  • GTP stateful inspection
  • Virtual domain support
  • Monitoring GTP activity
    • GTP signaling dashboard
    • GTP monitoring with SNMP
    • GTP monitoring with the FortiOS API
  • FGCP GTP tunnel synchronization
  • FGSP GTP tunnel synchronization
  • FGSP GTP tunnel synchronization between FGCP clusters
• Configuring GTP profiles
  • General GTP profile settings
  • GTP tunnel limiting
    • GTP profile tunnel limit
    • Global GTP tunnel limits
  • APN traffic shaping
    • Supporting sub-second sampling
  • Filtering S10 interface Mobility Management tunnels
    • S10 interface GTP mobility diagnose commands
  • GTPv0/v1 message filtering
  • GTPv2 message filtering
  • GTPv0/v1 message rate limiting
  • GTPv2 message rate limiting
  • When to use APN, basic (IMSI), or policy (advanced) filtering
  • GTP RAT timeout profiles
  • APN filtering
    • Creating APNs
    • Creating APN groups
    • Adding an APN filter to a GTP profile
    • APN filtering from the GUI
  • Basic filtering
    • IMSI on carrier networks
    • Adding basic filters
    • Adding basic filters from the GUI
  • GTPv0/v1 policy filtering
    • Adding GTPv0/v1 policy filters to a GTP profile
    • GTPv0v1 policy filtering from the GUI
    • About patterns
    • Radio Access Technology (RAT) type
  • GTPv2 policy filtering
    • Adding GTPv2 policy filters to a GTP profile
  • IE removal
  • IE validation
  • Encapsulated IP traffic filtering
    • When to use encapsulated IP traffic filtering
  • Encapsulated non-IP end user traffic filtering
  • GTP protocol anomaly detection
    • More about protocol anomaly detection
  • Anti-overbilling
    • Anti-overbilling with FortiOS Carrier
    • Setting up an interface to be the Gi or SGi gatekeeper
    • Setting up Gi or SGi gatekeeper settings
    • GTP profile anti-overbilling configuration
  • Adding IE allow lists to GTP profiles
  • Logging
    • Log message content
  • Improving NP6 or NP7 GTP performance
    • Diagnose commands
    • Verifying that GTP enhanced-mode is enabled
• GTPv0/v1 message reference
  • Common message types on carrier networks
  • GTP-C messages
  • GTP-U messages
  • Unknown GTPv0v1 messages
  • Path management messages
  • Tunnel management messages
  • Mobility management messages
  • Location management messages
  • GTPv0/v1 MBMS messages
  • GTP-U and charging management messages
• GTPv2 message reference
  • Unknown GTPv2 messages
  • Path management message types
  • Tunnel management message types
  • Mobility management messages
  • Restoration and recovery message types
  • CS Fallback and SRVCC related messages
  • GTPv2 MBMS messages
  • Non-3GPP access related messages
• SCTP Concepts
  • SCTP firewall
  • SCTP data chunk filtering by PPID
  • State required at each endpoint
  • Reliable data transfer
  • Congestion control and avoidance
  • Message boundary conservation
  • Path MTU discovery and message fragmentation
  • Message bundling
  • Multi-homed hosts support
  • Multi-stream support
  • Unordered data delivery
  • Security cookie against SYN flood attack
  • Built-in heartbeat (reachability check)
• Troubleshooting
  • FortiOS Carrier diagnose commands
  • Displaying GTP tunnel information and flushing GTP tunnels
    • GTP tunnel information
    • Setting up GTP tunnel filters
    • Displaying and flushing GTP tunnels using REST API calls
  • Applying IPS signatures to IP packets within GTP-U tunnels
  • GTP packets are not moving along your network
• Change log