S2 Security Gateway

GENBAND Difference

GENBAND offers S2 Security Gateway™, a carrier-class gateway that allows mobile operators to offer secure femtocells and FMC/Wi-Fi/WLAN solutions. GENBAND S2 offers the highest scalability and performance in IP network gateway security for service providers around the world.

For the mobile operator, femtocells and Wi-Fi access points pose security threats since these services use the public Internet for communication into the mobile core network. Use of the Internet for backhauling voice and multimedia traffic exposes the operator’s core network to numerous types of IP-based attacks and exploitations. The S2 Security Gateway ensures that femtocell and Wi-Fi access point communications can travel securely over untrusted networks.

Benefits

• Full set of security functions: State-of-the-art ATCA blade that supports a full set of security gateway functions to terminate access network connections and perform authorization and accounting for users
• Carrier-Class High Availability: Carrier-class HA solution supporting all common standards of mobile networks including PDIF for CDMA networks, GAN and GTP-U for GSM-based networks
• Most Scalable Solution: The S2 Security Gateway is the market’s most scalable platform, reaching up to 1.2 million IPSec tunnels and 3,000 tunnels-per-second setup with complete High Availability
• Multiservice Quality of Service (QoS): Splits and grooms voice and data traffic, enforcing QoS and bandwidth usage, enabling mobile operators to provide mission-critical services with support of QoS per service category

Overview

The S2 Security Gateway enables choice and flexibility for femtocell and Wi-Fi offload deployment models. Open standards compliance with IETF, 3GPP and 3GPP2 allow flexible options for any mobile operator. In the GSM/GPRS/UMTS networks, the S2 Security Gateway can also be configured as a Tunnel Termination Gateway that interworks with an existing GGSN to form a Packet Data Gateway, and in the CDMA networks, it can be configured as the Packet Data Interworking Function that has the option to interwork with the home agent via Mobile IP. With the S2 Security Gateway, GENBAND is committed to providing seamless, secure IP mobile broadband services.

• Security: The S2 Security Gateway provides both stateful and stateless firewall policies and supports up to one million stateful firewall sessions. The combination of IPSec security policy, firewall filtering rules and QoS capability is a powerful security model that constrains user traffic to the core network, policies the traffic on ingress and shapes the traffic on egress. The S2 Security Gateway leverages a state-of-the-art hardware and software design to provide secure, high-performance, WLAN interworking and QoS functions, including IPSec, IKEv1/v2, IP DoS protection, NAT/NAPT, NAT-T, virtual router, firewall and authentication, authorization and accounting functions. The S2 Security Gateway monitors femtocell/FMC connections for IP intrusion and attacks, including DoS and DDoS attacks.
• High scalability and high performance: Provides high scale and performance in a standards-based, modular ATCA chassis with unmatched 1.2 million IPSec tunnels and 3,000 tunnels-per-second setup. The product architecture performs all Layer-2/Layer-3/Layer-4/Layer-5 packet processing, statistics gathering and IPSec encryption/decryption at line rate. There are no performance impact or add-on modules needed to support security features such as IPSec, Firewall service, DoS protection, malicious URL filtering, Flow Mirroring, Anti-spoofing, NAT, QoS or SIP security. High availability with stateful failover of IP sessions. Based on a carrier-class Advanced Telecom Computing Architecture, the S2 uses purpose-built Security Gateway modules that reside in GENBAND’s GENiUS chassis. The S2 offers full HA with sub-second failover and supports hot-swappable components, with in-service platform upgrades.
• Interworking and Flexible Deployment Options: Supports 2G, 3G and IMS/LTE deployment models. The S2 SeGW supports a multitude of mobile standards including Packet Data Interworking Function for CDMA WLAN interworking, Tunnel Termination Gateway/Packet Data Gateway for UMTS WLAN interworking. Open standards compliance with IETF, IMS, and 3GPP/3GPP2 allows flexible options for deploying femtocell/FMC services – operators can start with a traditional MSC service model and migrate to architectures such as IMS and LTE.

Resources

Reviews