Blog Archives - Cellusys

Much myth surrounds St Patrick, his origin, mission and how he evangelised the Unified Signalling Firewall to drive the snakes out of mobile networks.

Saint Patrick used the shamrock to illustrate simply to the unwashed, how the Unified Signalling Firewall was meant to be. SS7, Diameter and GTP.

The real story however is that one day the Chief Security Officer, of a mobile network, was discussing signaling security with Patrick, a Cellusys signalling expert, over a round of golf. The CSO couldn’t understand why all the signalling security vulnerabilities needed to be processed and cross correlated with the other protocols in one Unified Signalling Firewall. Patrick looked down at the tee as he prepared to strike his golf ball with a 9 iron. He then spotted a beautiful Trifolium dubium, the wild-growing, three-leaf clover that botanists consider the official shamrock. Patrick leaned over and gently picked the shamrock.

Patrick then held the shamrock up and used its three leaves of a shamrock to explain to the CSO what the Holy Trinity in Signalling Security was: the SS7, the Diameter, and the Holy GTP. All separate protocols, but in unison, providing best practice signalling security.

Patrick now inspired, proceeded to continue his evangelism and spread the best practice security measures using the shamrock to simplify the Unified Signalling Firewall.

Today, St Patrick’s Day revelers wear a shamrock, signalling protection from denial of service attacks, call interception, SMS interception and location tracking of subscribers in mobile networks.

As they say, the rest is history and the Unified Signalling Firewall is now celebrated in Irish bars and with parades around the world each year on March 17th.

But people in Ireland hoping to wear an authentic shamrock may be out of luck this year.

“We have had a long and hard winters” David O’Reilly, a botanist at Trinity College Dublin, noted. The growing seasons have been affected, he said. For instance, Trifolium dubium, considered the official shamrock, is in short supply, according to media reports. “It’s quite possible that harder winters have hit this species’ abundance, as it’s an annual which germinates in the spring,”

To make up for the shortfall, many sellers are resorting to other three-leaf clovers, such as the perennials Trifolium repens and Medicago lupulina.

According to the Irish Times, these plants are “bogus shamrocks.

As with bogus shamrocks, be aware of bogus signalling security as its not always obvious to spot. Be sure to be sure and opt for St Patrick’s Unified Signalling Firewall to protect your mobile network.

Cellusys has always been the leader in bringing signalling security to mobile networks. Initially bringing the SS7 firewall, followed by the Diameter firewall and combining both of those in one system. But there is more that’s needed to protect the mobile network and GTP inherits signalling security vulnerabilities.
Bringing to mobile networks the Unified Signalling Firewall, Cellusys provides the greatest protection to signalling with a cross-protocol platform that implements what is deemed to be best practice.
The unified Cellusys Signalling Firewall system protects a mobile operator’s network by sitting on its external links to other networks and filtering messages from reaching the network, ensuring threats from individual messages, flooding or other issues are prevented from reaching the network and causing issues. The unified firewall supports all relevant signalling protocols: SS7/SIGTRAN, Diameter, SMPP, GTP.
Benefits of the unified firewall:
  • Consistent processing of rules over all protocols
  • CAT1/2/3 checks in one firewall for all protocols
  • Cross-protocol checks for complex threat scenarios
  • MAP queries for location checks for all protocols (e.g. GTP Session Create).
  • Common reporting overall incidents

Congratulations to the winners at the Annual Cellusys Awards.







ROCCO announces the Tier One Providers in SMS Firewall for 2018.

92 operators were surveyed in 104 countries rating 17 vendors to recieve the results

Tier One means that across all categories these providers reached 4-5 points out of 5 in over 40 KPI’s

SMS Firewall is growing in appeal for MNOs. An SMS Firewall is crucial to the monetisation of SMS and in this report hear it directly from the MNOs who take part in the research.

An SMS Firewall can be used for protecting both incoming as well as outgoing messages making sure that a the operator is not being abused by third parties. Primarily SMS Firewall has been used for keeping out spam SMS and/or A2P SMS. More recently the focus on A2P SMS filtering for e.g. grey routes in order to maximise the monetisation of A2P SMS is the primary driver of SMS Firewall implementations.

Rocco has concluded the Tier One Providers in Signalling Firewall Vendor Performance for 2018.

Rocco recognised the vulnerabilities within the Signalling System #7 (SS7) networks and protocols and within the Diameter protocol and the Evolved Packet Core (EPC) are a dominant topic in the discussions about mobile network security.

Though the minimal SS7 security features did not represent a problem in the 1980s, when SS7 was introduced and designed to be used as a “trusted network”, with the addition of new typologies of MNOs (such as MVNOs and micro-operators) and Roaming Hubs to the SS7 marketplace, the SS7 vulnerabilities represent a threat and are increasingly raising concerns among new but also longstanding MNOs. The SS7 protocol based networks still serve the majority of wireless subscribers.

Signalling Firewall is a something which the report concluded that some MNOs are afraid to admit that they need, nevertheless 50 MNOs took part in the report.

Between September and November 2018 ROCCO asked MNOs globally to give us their perceptions of Signalling Firewall Vendors, how well they knew them and how they would rate them.

Mobile Networks rated Vendors on 30+ KPIs in the area of Performance, Value, and Leadership. The survey was about brand perception, experience of these providers as well as an understanding of whether MNOs would choose them over others.

Today the results were published and Cellusys’ Signalling Firewall is ranked by mobile operators as the leading vendor.

Read more on the ROCCO website: