RAN Security
Table of Contents
RAN Security
GTP deployment on a firewall includes Radio Access Network
(RAN) security.
When you deploy a firewall for Radio
Access Network (RAN) security, the firewall inspects the traffic
that flows between the access network and packet core. In some cases, the
firewall inspects the traffic between various network functions
of the packet core.
For a 4G/LTE only network, GTP RAN security supports the following
deployment options:
- Firewalls on S11 and S1-U interfaces for GTPv2-C and GTP-U traffic inspection
- Firewalls on S5 interfaces for GTPv2-C and GTP-U traffic inspection
For a 3G and 4G/LTE network, GTP RAN security supports firewalls
on S5 and Gn interfaces for GTPv2-C, GTPv1-C and GTP-U traffic inspection
(for 3G and 4G interoperability).
When you configure GTP security for RAN,
you should also configure SCTP security for RAN as described in SCTP Use Cases.