Application layer signaling security with next generation firewall
AssigneePalo Alto Networks, Inc.
InventorsSachin Verma, Leonid Burakovsky
Life of this patent
Estimating the term…
Abstract
Techniques for application layer signaling security with next generation firewall are disclosed. In some embodiments, a system/process/computer program product for application layer signaling security with next generation firewall includes monitoring application layer signaling traffic on a service provider network at a security platform; and filtering the application layer signaling traffic at the security platform based on a security policy.
Claims24
A system, comprising:
- a processor configured to:
- monitor application layer signaling traffic on a service provider network at a security platform;
- filter the application layer signaling traffic at the security platform based on a security policy, wherein an application layer signaling protocol is a Mobile Application Part (MAP) protocol, a CAMEL Application Part (CAP) protocol, or an Intelligent Network Application Part (INAP), and wherein the security platform is configured with a plurality of security policies based on an application layer signaling protocol to perform security policy enforcement based on the MAP, CAP, or INAP protocol;
- and
- perform state and packet validation of an underlying Stream Control Transport Protocol (SCTP) while filtering MAP, CAP, or INAP protocol messages per subsystem number (SSN) or source/destination IP addresses;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- monitoring application layer signaling traffic on a service provider network at a security platform;
- filtering the application layer signaling traffic at the security platform based on a security policy, wherein an application layer signaling protocol is a Mobile Application Part (MAP) protocol, a CAMEL Application Part (CAP) protocol, or an Intelligent Network Application Part (INAP), and wherein the security platform is configured with a plurality of security policies based on an application layer signaling protocol to perform security policy enforcement based on the MAP, CAP, or INAP protocol;
- and
- performing state and packet validation of an underlying Stream Control Transport Protocol (SCTP) while filtering MAP, CAP, or INAP protocol messages per subsystem number (SSN) or source/destination IP addresses.
A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- monitoring application layer signaling traffic on a service provider network at a security platform;
- and
- filtering the application layer signaling traffic at the security platform based on a security policy, wherein an application layer signaling protocol is a Mobile Application Part (MAP) protocol, a CAMEL Application Part (CAP) protocol, or an Intelligent Network Application Part (INAP), and wherein the security platform is configured with a plurality of security policies based on an application layer signaling protocol to perform security policy enforcement based on the MAP, CAP, or INAP protocol;
- and
- performing state and packet validation of an underlying Stream Control Transport Protocol (SCTP) while filtering MAP, CAP, or INAP protocol messages per subsystem number (SSN) or source/destination IP addresses.
Dependencies are inferred from the claim text.