Resource

What is the SS7 Firewall?

The single-engine SS7 Firewall solution explained

Firewall technology will undergo major changes as we approach the introduction of 5G across industries.

Service providers will have to secure services across 2G/3G, 4G and 5G for many years to come. In conjunction with the introduction of IT protocol in the 5G mobile core, security solutions such as the SS7 Firewall require a fundamentally different and converged approach.

What is the SS7 Firewall?

The SS7 Firewall is a ‘signalling firewall’ used to protect mobile operators from SS7 Attacks. The SS7 Firewall protects diameter networks specifically against potential attacks, unauthorized senders, malformed messages, overload situations and much more. The SS7 Firewall supports the FS.19 GSMA guidelines for Signaling Firewalls of the Diameter protocol.

The SS7 Firewall, or ‘Diameter Firewall’ (DFW), is a single-engine software solution designed to work across signaling protocols. Infradata considers a threat to one domain as a threat to all domains. That’s why the SS7 Diameter Firewall provides service providers a path to gradual migration and a centralized security architecture across Diameter, SIP, SS7 and HTTP – required for 5G signaling operations.


Signaling System No. 7 (SS7) is presented under various denominations:

  • Common Channel Signalling System 7 (CCSS7) in the US,
  • Common Channel Interoffice Signaling 7 (CCIS7) in the UK or
  • N7 (Signalisierungssystem Nummer 7) in German

5G Security and SS7 Firewall functionality across access networks

Because of the technical flaw found in SS7 – one of the biggest infrastructure loopholes in the telecom web which has become a source of fear and paranoia, the SS7 firewall is getting more and more attention of the telecom and service provider industry.

It shows that the traditional approach to securing signaling per access technology (and protocol) no longer suffices. Security products are commonly designed on the assumption that securing a single protocol technology is sufficient. While SS7 is still the dominant protocol technology in use, and although Diameter adoption is growing, 5G will introduce HTTP/2 to the Mobile core. Never before were Mobile networks so vulnerable to attacks from the connected world, making 5G security an essential element for your 5G Transition and thus Mobile Solutions.

The telecoms industry has to rethink how to deal with these new threats. Mobile network technologies and the protocols supporting them evolve rapidly and so do the criminals looking for ways to exploit them.

 

Share this page: