Diameter security with next generation firewall
AssigneePalo Alto Networks, Inc.
InventorsSachin Verma, Leonid Burakovsky, Mingxu Huo, Fengliang Hu
Life of this patent
Estimating the term…
Abstract
Techniques for Diameter security with next generation firewall are disclosed. In some embodiments, a system/process/computer program product for Diameter security with next generation firewall includes monitoring Diameter protocol traffic on a service provider network at a security platform; and filtering the Diameter protocol traffic at the security platform based on a security policy.
Claims20
A system, comprising:
- a processor configured to:
- monitor Diameter protocol traffic on a service provider network at a security platform;
- filter the Diameter protocol traffic at the security platform based on a security policy, wherein a signaling transport protocol is a signaling transport (SIGTRAN) protocol;
- perform state and packet validation of the Diameter protocol per payload protocol identifier (PPID) and source/destination IP addresses while filtering SIGTRAN protocol messages;
- and
- enforce the security policy using the security platform;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- monitoring Diameter protocol traffic on a service provider network at a security platform;
- filtering the Diameter protocol traffic at the security platform based on a security policy filter the Diameter protocol traffic at the security platform based on a security policy, wherein a signaling transport protocol is a signaling transport (SIGTRAN) protocol;
- performing state and packet validation of the Diameter protocol per payload protocol identifier (PPID) and source/destination IP addresses while filtering SIGTRAN protocol messages;
- and
- enforcing the security policy using the security platform.
A computer program product, the computer program product being embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:
- monitoring Diameter protocol traffic on a service provider network at a security platform;
- filtering the Diameter protocol traffic at the security platform based on a security policy filter the Diameter protocol traffic at the security platform based on a security policy, wherein a signaling transport protocol is a signaling transport (SIGTRAN) protocol;
- performing state and packet validation of the Diameter protocol per payload protocol identifier (PPID) and source/destination IP addresses while filtering SIGTRAN protocol messages;
- and
- enforcing the security policy using the security platform.
Dependencies are inferred from the claim text.