imsi filtering with cubro sessionmaster · • the international mobile subscriber identity (imsi)...

9
IMSI Filtering with Cubro Sessionmaster 26 June 2017 www.cubro.com

Upload: others

Post on 24-Mar-2020

14 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique

IMSI Filtering with Cubro Sessionmaster

26 June 2017

www.cubro.com

Page 2: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique

What is IMSI?

• The International Mobile Subscriber Identity (IMSI) number iscentral to identifying users on a carrier network.

• It is a unique number that is assigned to a cell phone or mobiledevice to identify it on the GMS or UTMS network.

• Typically, the IMSI number is stored on the SIM card of themobile device and is sent to the network as required.

• An IMSI number is 15 digits long, and includes the MobileCountry Code (MCC), Mobile Network Code (MNC), and MobileStation Identification Number (MSIN).

Page 3: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique

Why do we need IMSI Filter?

To reduce the load on monitoring equipment

To prevent VIP and classified customers from monitoring

Either for small scale monitoring or to capture a single subscriber with Wireshark or similar tools

Page 4: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique
Page 5: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique

Challenges on IMSI Filtering

High load and the fact that the IMSI is not found in any packet

depending on the network design and used technology

(2G/3G/4G).

The IMSI information is typical on a different logical and

physical interface.

To make IMSI filtering possible, other functions like aggregation,

load balancing and session correlation must be combined.

Page 6: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique

Solution

The Cubro Sessionmaster

performs all these functions!

Page 7: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique

Sessionmaster EXA40(D)

40 x 10Gbit

Up to 2 x Octeon III CN6xxx CPU (30 cores each)

Up to 2 x 64 GB DDR memory

Up to 2 x 160 billion instructions per sec

Up to 80 Gbps L7 filtering performance (forwarding only)

Up to 40 Gbps L7 correlation performance

Internal L4 NPB with 800Gbps performance

Page 8: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique

IMSI Filter internal configuration

Solution for up to 100 Gbit and one million IMSI filtered out (white list)

Page 9: IMSI Filtering with Cubro Sessionmaster · • The International Mobile Subscriber Identity (IMSI) number is central to identifying users on a carrier network. • It is a unique

Thank you

EMEA

Cubro Network VisibilityGhegastraße 1030 Vienna, Austria

Tel.: +43 1 29826660Fax: +43 1 2982666399

Email: [email protected]

Cubro US337 West Chocolate AveHershey, PA 17033

Tel.:717-576-9050Fax.: 866-735-9232

Email: [email protected]

Cubro Asia Pacific

8, Ubi Road 2 #04-12 ZervexSingapore 408538

Tel.: +65-97255386

Email: [email protected]

North America APAC Japan

Cubro Japan

8-11-10-3F, Nishi-Shinjuku, Shinjuku, Tokyo, 160-0023 Japan

Email: [email protected]