GTP deployment on a firewall includes Radio Access Network
(RAN) security.
When you deploy a firewall for Radio
Access Network (RAN) security, the firewall inspects the traffic
that flows between the (BH) Backhaul and the EPC. The firewall is
deployed mostly on S1-U and S11 interfaces to inspect both GTPv2-C
and GTP-U traffic.
When you configure GTP security for RAN,
you should also configure SCTP security for RAN as described in SCTP Use Cases.