GTP deployments on a Palo Alto Networks firewall include
Non-3GPP Access security.
When you deploy a firewall for Non-3GPP
Access security, the firewall inspects the traffic that flows between
the Non-3GPP Access network and the EPC. The firewall is deployed
mostly on S2b or S2a interfaces to inspect both GTPv2-C and GTP-U
traffic.