Enhanced visibility of devices behind cellular routers

A method, comprising:

• allocating a block of ports to a device for a network address translation (NAT) operation performed on the device using a cellular router, wherein the device connects to a core cellular network via the cellular router;
• sharing the block of ports, device information associated with the device, and metadata associated with the device with a device intelligence collection engine (DICE) to facilitate device level visibility of network address translated (NAT'd) network traffic;
• and
• performing an action on the NAT'd network traffic, wherein the NAT'd network traffic associated with the device shares a common internal IP address with other devices connected to the core cellular network via the cellular router, and wherein the action performed on the NAT'd network traffic is performed using one or more of the following:
• the block of ports, an external IP address associated with the device, the device information associated with the device, and/or the metadata associated with the device.

A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:

• allocating a block of ports to a device for a network address translation (NAT) operation performed on the device using a cellular router, wherein the device connects to a core cellular network via the cellular router;
• sharing the block of ports, device information associated with the device, and metadata associated with the device with a device intelligence collection engine (DICE) to facilitate device level visibility of network address translated (NAT'd) network traffic;
• and
• performing an action on the NAT'd network traffic, wherein the NAT'd network traffic associated with the device shares a common internal IP address with other devices connected to the core cellular network via the cellular router, and wherein the action performed on the NAT'd network traffic is performed using one or more of the following:
• the block of ports, an external IP address associated with the device, the device information associated with the device, and/or the metadata associated with the device.