FortiOS Carrier features

FortiOS Carrier supports all standard FortiOS features including SCTP firewalling. FortiOS Carrier adds the following additional features, specific to FortiOS Carrier:

• Protection for Packet Forwarding Control Protocol (PFCP) in 4G Control-User Plane Separation (CUPS) and 5G signaling evolution networks. When PFCP is used as the control plane, the user plane is GTP-U. FortiOS Carrier uses a session helper to monitor PFCP traffic. The PFCP session helper must be enabled for PFCP protection to work. FortiOS Carrier can be installed in a wide variety of locations in any PFCP network to apply various types of PFCP protection depending on traffic and security needs, including.
  • Message filtering.
  • Monitoring.
  • PFCP protocol anomaly detection.
• Protection for GTPv0, GTPv1, and GTPv2 traffic in 2G, 3G, 4G, and 5G carrier networks. FortiOS Carrier can be installed in a wide variety of locations in any GTP network to apply various types of GTP protection depending on traffic and security needs, including:
  • GTP tunnel limiting.
  • APN traffic filtering.
  • Message filtering.
  • Message rate limiting.
  • Various other methods of filtering GTP traffic based on content, addresses, technology, and so on.
  • GTP protocol anomaly detection.
  • Information element (IE) validation and removal.
  • Encapsulated IP traffic filtering.
  • Anti-overbilling protection.
  • RAT timeout filtering.