Application layer signaling security with next generation firewall
AssigneePalo Alto Networks, Inc.
InventorsSachin Verma, Leonid Burakovsky
Life of this patent
Estimating the term…
Abstract
Techniques for application layer signaling security with next generation firewall are disclosed. In some embodiments, a system/process/computer program product for application layer signaling security with next generation firewall includes monitoring application layer signaling traffic on a service provider network at a security platform; and filtering the application layer signaling traffic at the security platform based on a security policy.
Claims20
A system, comprising:
- a processor configured to:
- monitor application layer signaling traffic on a service provider network at a security platform;
- perform rate limiting of messages in the application layer signaling traffic at the security platform based on a security policy, wherein an application layer signaling protocol is a Mobile Application Part (MAP) protocol, a CAMEL Application Part (CAP) protocol, or an Intelligent Network Application Part (INAP);
- and
- perform state and packet validation of a Signaling Connection Control Part (SCCP) protocol while performing rate limiting of SIGTRAN protocol messages;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- monitoring application layer signaling traffic on a service provider network at a security platform;
- performing rate limiting of messages in the application layer signaling traffic at the security platform based on a security policy, wherein an application layer signaling protocol is a Mobile Application Part (MAP) protocol, a CAMEL Application Part (CAP) protocol, or an Intelligent Network Application Part (INAP);
- and
- performing state and packet validation of a Signaling Connection Control Part (SCCP) protocol while performing rate limiting of SIGTRAN protocol messages.
A computer program product, the computer program product being embodied in a tangible computer readable storage medium and comprising computer instructions for:
- monitoring application layer signaling traffic on a service provider network at a security platform;
- and
- performing rate limiting of messages in the application layer signaling traffic at the security platform based on a security policy, wherein an application layer signaling protocol is a Mobile Application Part (MAP) protocol, a CAMEL Application Part (CAP) protocol, or an Intelligent Network Application Part (INAP);
- and
- performing state and packet validation of a Signaling Connection Control Part (SCCP) protocol while performing rate limiting of SIGTRAN protocol messages.
Dependencies are inferred from the claim text.