Patent ID: 11950144
Assignee: PALO ALTO NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 12:
13. A method, comprising:
monitoring network traffic on a mobile network at a security platform to identify a GTP-U tunnel session setup message associated with a new session;
extracting a plurality of parameters from the GTP-U tunnel session setup message and from XnAP traffic to extract contextual information at the security platform; and platform, wherein extracting a plurality of parameters from the GTP-U tunnel session setup message and from XnAP traffic to extract contextual information at the security platform further comprises:
extracting User Plane (UP) transport layer information from a HANDOVER REQUEST message exchanged between NG-RAN nodes to set up the GTP-U tunnel session;
inspecting XnAP traffic over an Xn-C interface between the NG-RAN nodes in an NG-RAN environment in the mobile network to extract contextual information; and
inspecting GTP-U traffic over an Xn-U interface between the NG-RAN nodes for applying layer-7 security on User Plane (UP) traffic; and

enforcing a security policy at the security platform on the new session based on one or more of the plurality of parameters to apply context-based security to the network traffic transported between the NG-RAN nodes in an NG-RAN environment in the mobile network.