Signalling Firewall Training

1- Syllabus

Title Syllabus
SS7 Protocol Overview CCS Concepts, Architecture, & GSM Call Flows
SS7 Protocol - MTP
SS7 Over IP (Sigtran)
SS7 Protocol - ISDN-UP
SS7 Protocol - SCCP
SS7 Protocol - ITU-T TCAP & GSM MAP
System Architecture Overview of Network Topology
Network Integration
Connections to network (M3UA / SMPP / SNMP /
SMTP / NTP / etc.)
Message Interception policy (STP configuration)
Hardware Servers: Message Processors
Servers: Central Servers
IP link connectivity
External VPN connection
Internal IP Communication
Software Access Platform (Overview and capabilities)
Message Processing Software
Web Administration Interface
Post-Processor
Monitor
Database
System Environment and System Administration
Administration System Access & Security

1|Page
 User Management
User Roles & Restrictions
System Configuration
Network Configuration
Message Processor / Connections
Monitoring / Events / Alerting
Solution Environment
OS introduction (Linux)
System Log Files
System Guides
Firewall Introduction Message Flows
Defence Message Flows / Interception
Possible Threats
Online Message Checks
Custom Network Rules
Firewall Use Cases
Offline Analysis
Firewall User Tutorial Virtual Network Configuration
System Settings
Network Rules
Online Message Checks
Offline Analysis
Reports

2|Page
2- Agenda

Day 1 SS7 Protocol Overview

09:00 - 12:30 CCS Concepts, Architecture, Basic terms and definitions

Why deploy Common Channel Signaling
& GSM Call Flows
(CCS)?
Examples of signaling (CAS & CCS)
Advantage of CCS
Services offered with CCS
Switches (SSP)
Signal Transfer Points (STP)
Service Control Points (SCP)
Linksets and Links
Signaling Point Codes
Subsystem Numbers (SSNs)
Introduction to the SS7 protocol
GSM identities
Sample GSM call flows
12:30 - 13:30 Lunch NA

13:30 - 15:00 SS7 Protocol - MTP Supporting documentation

Signal Unit structure
Data Link layer
Link layer
Sigtran suite of protocols for IP High
Speed Links (HSL)
Network layer
Network Management
Gateway Screening

3|Page
15:00 17:00 SS7 Over IP (SIGTRAN) Supporting documentation
IP Protocol
IP Network Interface
Architecture
Stream Transmission Control Protocol
(STCP)
Overview of User Adaptation (UA) layers
MTP level 2 Peer Adaptation (M2PA)
MTP level 2 User Adaptation (M2UA)
Comparing M2PA & M2UA
MTP layer 3 User Adaptation (M3UA)
SCCP User Adaptation (SUA)

4|Page
 Day 2 SS7 Protocol Overview & Signalling Firewall

09:00 - 12:30 SS7 Protocol - ISDN-UP SS7 Protocol - ISDN-UP

Supporting Documentation
SS7 Protocol SCCP
Messages used by ISDN-UP
SS7 Protocol - ITU-T TCAP & Message and parameter examination
Trunk maintenance
GSM MAP
Miscellaneous trunking activities

SS7 Protocol - SCCP

Supporting Documentation
Connectionless and connection-
oriented services defined
SCCP messages
The Unitdata (UDT) message
Global Title Translation
Global Title routing
Sample call flows using SCCP and
global title translations

SS7 Protocol - ITU-T TCAP & GSM MAP

Supporting Documentation
Structure of ITU-T TCAP
TCAP Forms
Local and Global Reference
3GPP Standards
GSM MAP operations
GSM MAP parameters
GSM MAP standards documents
Overview of Intelligent Networking
(CAMEL) & how it relates to GSM MAP

12:30 - 13:30 Lunch NA

13:30 15:00 System Architecture Network Integration, Hardware, Software

Module

15:00 - 17:00 Environment & System Administration, System

Administration Module Configuration, Solution Environment

5|Page
 Day 3 - Signalling Firewall

09:00 - 11:30 Solution Introduction Firewall Integration, Message Flows,

Module Message Interception, Signalling
Firewall Overview
11:30 - 12:30 SIGTRAN (SS7) Signalling Explaining SS7 and Diameter
and Diameter vulnerabilities and reviewing the call
Vulnerabilities flows of vulnerabilities

12:30 - 13:30 Lunch NA

13:30 - 16:00 User Tutorial Module Slides and practical demo

16:00 - 17:00 Q&A session Any further questions related to training.

6|Page
 Day 4 - SMS Firewall

09:00 - 10:30 System Architecture Network Integration, Hardware,

Module Software
10:30 - 12:30 Environment & System Administration, System
Administration Module Configuration, Solution Environment
12:30 - 13:30 Lunch NA
13:30 15:30 Solution Introduction Firewall Integration, Message Flows,
Module Message Interception, Signalling
Firewall Overview
15:30 - 17:00 User Tutorial Module Slides and practical demo

7|Page
 Day 5 - Signalling and SMS Firewall

Additional time for hands on with

09:00 - 10:30 Workshop
user interfaces

Hacking & Signalling: Intercepts,

Denial of Service Attacks, Spoofing,
10:30 - 12:30 GSMA Standards SMS related Fraud, Revenue
Leakage (coverage of IR-71 & IR-80)

12:30 - 13:30 Lunch NA

How deployment of Cellusys

Signalling Firewall & SMS Defence
13:30 - 15:00 Deployment Review will protect the MCI network from
attacks

15:00 - 17:00 Final Q&A extra Q&A session

8|Page
3- References

Course Materials
Signalling Firewall
(1) Signalling Firewall System Architecture.pdf
(2) Signalling Firewall Environment & Administration.pdf
(3) Signalling Firewall Introduction.pdf
(4) Signalling Firewall User Tutorial.pdf

Appendix
Reference Guides
SFW-User-Guide
SFW-System-Guide
SFW-Support-Guide
SFW-Alarms-Guide

Other
Training Method: Classroom training and Hands on?
Language: English
Preparation:
Course materials: Electrical files of listed in (1) above
Classroom and white board
Projector
PC for hands on: Prepared by each attendee

9|Page