Apparatus, method, and computer program of protecting communications between networks using predefined security profiles

An apparatus configured to protect communications between a first network and a second network, the apparatus being a second security node of the second network and comprising:

• at least one processor;
• and
• at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus at least to:
• receive, when a first security mechanism is selected to protect communications between a first security node of the first network and the second security node, information indicating one or more predefined security profiles from the first security node in a security parameter exchange request of a parameter exchange procedure, wherein a predefined security profile of the one or more predefined security profiles includes pre-populated parameters for a modification policy and a data type encryption policy;
• select one or more selected security profiles from the one or more predefined security profiles;
• and
• cause the second security node to communicate with the first security node in accordance with the one or more selected security profiles.

A method comprising:

• causing, when a first security mechanism is selected to protect communications between a first security node of a first network and a second security node of a second network, information indicating one or more predefined security profiles to be sent from the first security node towards the second security node in a security parameter exchange request of a parameter exchange procedure, wherein a predefined security profile of the one or more predefined security profiles includes pre-populated parameters for one or more of:
• a modification policy and a data type encryption policy;
• and
• causing the first security node to communicate with the second security node in accordance with one or more selected security profiles selected from the one or more predefined security profiles.

A method comprising:

• receiving, when a first security mechanism is selected to protect communications between a first security node of the first network and the second security node of a second network, information indicating one or more predefined security profiles at the second security node sent by the first security node in a security parameter exchange request of a parameter exchange procedure, wherein a predefined security profile of the one or more predefined security profiles includes pre-populated parameters for a modification policy and a data type encryption policy;
• selecting, at the second security node, one or more selected security profiles from the one or more predefined security profiles;
• and
• causing the second security node to communicate with the first security node in accordance with the one or more selected security profiles.