A system, comprising: a processor configured to: monitor network traffic on a service provider network at a security platform to identify a new session, wherein the security platform monitors wireless interfaces including a plurality of interfaces for a control protocol and user data traffic in a mobile core network for a 5G network to provide multi-access distributed edge security for the 5G network, and wherein the service provider network includes the 5G network or a converged 5G network; extract subscription and/or equipment identifier information for user traffic associated with the new session at the security platform, wherein the subscription identifier information is identified by a Subscription Permanent Identifier, SUPI, and/or a General Public Subscription Identifier, GPSI, and the equipment identifier information is identified by a Permanent Equipment Identifier, PEI; determine a security policy to apply at the security platform to the new session based on the subscription and/or equipment identifier information, wherein the security policy is enforced based at least in part on a combination of the SUPI, the GPSI, and the PEI; and block the new session from accessing a resource based on the security policy; and a memory coupled to the processor and configured to provide the processor with instructions. a processor configured to: monitor network traffic on a service provider network at a security platform to identify a new session, wherein the security platform monitors wireless interfaces including a plurality of interfaces for a control protocol and user data traffic in a mobile core network for a 5G network to provide multi-access distributed edge security for the 5G network, and wherein the service provider network includes the 5G network or a converged 5G network; extract subscription and/or equipment identifier information for user traffic associated with the new session at the security platform, wherein the subscription identifier information is identified by a Subscription Permanent Identifier, SUPI, and/or a General Public Subscription Identifier, GPSI, and the equipment identifier information is identified by a Permanent Equipment Identifier, PEI; determine a security policy to apply at the security platform to the new session based on the subscription and/or equipment identifier information, wherein the security policy is enforced based at least in part on a combination of the SUPI, the GPSI, and the PEI; and block the new session from accessing a resource based on the security policy; and monitor network traffic on a service provider network at a security platform to identify a new session, wherein the security platform monitors wireless interfaces including a plurality of interfaces for a control protocol and user data traffic in a mobile core network for a 5G network to provide multi-access distributed edge security for the 5G network, and wherein the service provider network includes the 5G network or a converged 5G network; extract subscription and/or equipment identifier information for user traffic associated with the new session at the security platform, wherein the subscription identifier information is identified by a Subscription Permanent Identifier, SUPI, and/or a General Public Subscription Identifier, GPSI, and the equipment identifier information is identified by a Permanent Equipment Identifier, PEI; determine a security policy to apply at the security platform to the new session based on the subscription and/or equipment identifier information, wherein the security policy is enforced based at least in part on a combination of the SUPI, the GPSI, and the PEI; and block the new session from accessing a resource based on the security policy; and a memory coupled to the processor and configured to provide the processor with instructions.