25-31
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Chapter 25 Configuring Application Layer Protocol Inspection
GTP Inspection
• Audit record 201005 is generated if the secondary dynamic channel preparation failed due to
memory shortage.
In conjunction with NAT, the FTP application inspection translates the IP address within the application
payload. This is described in detail in RFC 959.
GTP Inspection
This section describes the GTP inspection engine. This section includes the following topics:
• GTP Inspection Overview, page 25-31
• Configuring a GTP Inspection Policy Map for Additional Inspection Control, page 25-32
• Verifying and Monitoring GTP Inspection, page 25-36
Note GTP inspection requires a special license. If you enter GTP-related commands on a security appliance
without the required license, the security appliance displays an error message.
GTP Inspection Overview
GPRS provides uninterrupted connectivity for mobile subscribers between GSM networks and corporate
networks or the Internet. The GGSN is the interface between the GPRS wireless data network and other
networks. The SGSN performs mobility, data session management, and data compression (See
Figure 25-3).
Figure 25-3 GPRS Tunneling Protocol
The UMTS is the commercial convergence of fixed-line telephony, mobile, Internet and computer
technology. UTRAN is the networking protocol used for implementing wireless networks in this system.
GTP allows multi-protocol packets to be tunneled through a UMTS/GPRS backbone between a GGSN,
an SGSN and the UTRAN.
119935
Internet
Corporate
network 2
Corporate
network 1
Home PLMN
Gn
Gp
GRX
Roaming partner
(visited PLMN)
MS
SGSN GGSN
Gi
To Next Page
Loading...
