Enea Adaptive Signaling Firewall

Cross-Protocol Signaling Security

The Adaptive Signaling Firewall is a true multi-protocol firewall, protecting the SS7, Diameter, GTP-C, HTTP/2, SIP, and ISUP protocols.

Based on a single platform processing all signaling on all protocols, close correlation is made possible during active processing, not just post-processing or reporting. This gives it the edge to efficiently counter sophisticated attacks spanning several protocols by detecting and blocking them in real time.

Cross-protocol correlation draws intelligence and insights from all protocols simultaneously, leaving no gaps for malicious actors to exploit.

 

Deploy Right-Sized Security Anywhere

The Adaptive Signaling Firewall deploys on any public, hybrid, or private cloud, virtualized environments, or bare-metal servers. It is built on a cloud-native, containerized architecture running on Kubernetes. The diversity of deployment options allows operators to install the Adaptive Signaling Firewall on infrastructure used today, with complete confidence that it will support any future cloud migration or infrastructure change. Containerization makes scaling easy, providing right-sized signaling security at all times.

 

Standards Compliance and Beyond

The Adaptive Signaling Firewall complies with the GSMA FS.11, FS.19, FS 20, and FS.36 guidelines. It covers all aspects of GSMA’s Cat 1, 2, and 3 security recommendations. It goes beyond the standards to detect unusual lower-level activity, inconsistencies in signaling messages, and other anomalies.

 

Adapt to New Signaling Threats in Minutes

Rules logic for detecting and blocking malicious signaling messages is created or updated through an intuitive user interface configuring the platform instead of changing its runtime components. Changes in the algorithms are done without service interruptions and without waiting for a maintenance window, meaning updated security can be in place in minutes, not months.

 

5G Ready

The Adaptive Signaling Firewall includes a Secure Edge Protection Proxy (SEPP) for protecting 5G SA interconnects. This works in tandem with the HTTP/2 firewall for 5G SA signaling. 5G NSA signaling is protected through the Diameter firewall.

Explore 5G security>

Multi-Protocol Signaling Firewall Correlation

Malicious actors are not constrained to attacking single protocols. They attack the interface that gets them through and enables them to reach their goals. Increasing sophistication and complexity can be seen in recent attacks, especially when backed by nation-states. Complex attacks carried out over multiple protocols simultaneously would go unnoticed if the protocols were protected in isolation.

Other attacks on a single protocol can also be discovered through multi-protocol correlation. For example, something is not correct if signaling related to a single subscriber shows up at the same time on SS7 in one location and Diameter in a completely different location. A cross-protocol correlation is needed to catch this abnormality.

SS7 Firewall

SS7 is notorious for its vulnerabilities, which stem from an assumption of trust in a closed network while, in fact, access can be bought by governments and corporations. SS7 has long been the primary attack surface for malicious agents, who constantly find new ways to exploit it as standard security measures are installed. It needs to be protected by an SS7 firewall like Enea’s Signaling Firewall, which goes beyond basic regulatory requirements, providing protection that adapts to sophisticated and complex attacks.

Diameter Firewall

In some respects, Diameter provides improved security compared to SS7, but without a Diameter firewall like Enea’s Signaling Firewall, it can still be accessed and exploited through interconnects. As SS7 becomes better protected, malicious actors find new ways to exploit Diameter to achieve their targets.

GTP-C Firewall

GTP-C also has built-in security flaws, making it vulnerable to, for example, fraud and DoS attacks. Also, GTP is beginning to become targeted by adversaries. Enea’s GTP-C firewall can block attacks effectively.

Voice call spoofing firewall

CLI spoofing (or caller ID spoofing) is a surging problem. In many countries, regulators watch the issue and prepare or implement regulations. Enea Adaptive Signaling Firewall helps operators comply with regulations and protect subscribers from spoofing fraud. Enea Adaptive Signaling Firewall uses a zero-trust approach to block any call with spoofed caller ID arriving on the interconnect. All calls are assessed and verified, decoupling protection from dependencies on the originating network. The firewall supports both VoLTE/VoNR (SIP) and circuit-switched calling (ISUP) and is compatible with any roaming infrastructure.