Solutions Overview

Copyright Cellusys 2023

Cellusys Protect – Signalling Firewall
A comprehensive cross-protocol signalling security solution using advanced internal correlation to
mitigate complex threat scenarios. Protect your network against malicious attacks in every layer,
and in every message.

Fully compliant with GSMA FS.11, A single firewall for SS7,

FS.19, FS.20 requirements Diameter, GTP-C and SIP

Advanced message flow control Predefined and user-defined rules supported

• Drop with error, false delivery, • Supports user-defined rules based on any field in any
CAT3 query, etc. message - the ultimate in powerful flexibility

• Message modification also supported • Rules updates delivered seamlessly while in operation -
no service interruptions for updates or upgrades

Powerful rules engine with Ruleset updates delivered

unlimited matching criteria without interruption

Installs inline for minimal User-defined rules can be

network disruption added for any local threat
No increased risk to network availability

Reliable, scalable, easy-to-use Available as turnkey

or managed service

Copyright Cellusys 2023

Managed Services
Security
Hackers and bad actors are constantly looking for new ways to defeat or circumvent existing firewall
practices. Stay a step ahead by letting our team of experts manage your signalling security to ensure your
network and subscribers benefit from best in class protection from DoS, location tracking, eavesdropping
(man in the middle), spam and other fraud and attacks over signalling protocols.

A2P Monetisation
SMS fraud is a billion dollar industry, and still only around half of mobile operators have countermeasures
in place to stop illegitimate A2P transmission and spam. Termination of A2P traffic over unapproved (grey)
routes is zapping profits, even though the solution is simple.

Best in Class Operational

Let us handle the operation and maintenance of • 24-7 system monitoring and technical support
your Cellusys products and achieve best in class • Extensive monitoring on high traffic occasions
network quality with the help of a dedicated • End-to-end resolution of complaints received from NOC
project manager and operations team.

Well Informed Maintenance

We’ll make sure you don’t miss a beat by providing • Configuration management and provisioning
your team with customised, transparent reporting • Preventative system maintenance
tailored for the business and security needs of your • Backup and archiving
network.

Why? Performance
A managed service can help take the pressure off • Performance reports of system and application
managing difficult transitions and accessing the • Propose action plan for improving network performance
skilled resources required in a complex • Hardware and software upgrades
communications world. Outsourcing firewall
management also reduces human resources and
training costs. Depending on the needs of your
network, you can achieve predictable monthly
costs or convert Opex costs to Capex costs.
Copyright Cellusys 2023
 Threat Intelligence Service
See security threats from across the
Cellusys Deployment Base.
A global view of
telecoms threats Receive security rulesets based on new
being analyzed by or evolving attacks from across the
Umlaut and Cellusys globe.
signaling expert’s
Umlaut and Cellusys continually
analysing global telecoms traffic to
identify new and emerging threats to
stay ahead of attackers.

Cellusys & umlaut

A full 360° view of security • Proactive and repeated penetration testing
helps ensure network is protected at all times

• Independent. Continuous.
Easy to setup.

• Cloud-based service to test

Penetration Prevention • Cellusys Managed Services
interconnection on demand.
testing via and Detection Team continually analyse
intaas traffic for new attack vectors

• All customers alerted as soon as a • New attack vectors fed back into umlaut
new attack vector is discovered Threat intaas to be reproduced
Intelligence

Threat Descriptions Report

Threats continually
Description of Corresponding Rule
updated based on
all threats based definitions provided for
research by leading telecoms
on their Severity. each defined threat.
security industry experts.
Copyright Cellusys 2023
 Intrusion Detection
A threat detection and reporting tool easily integrated with other
FMS systems including firewalls to take action

SFW deployed in passive

mode can operate as an IDS
• Environmental Awareness
• Same checks for threats as for
active firewall
• Correlation of threat messages
with responses

Did the attack succeed? Easily configured

to integrate with
3rd party systems

Event Aggregation
Each individual threat is independently logged with its own event details
Events can also be aggregated to show:

Threats based on target

Frequency of different subscriber
threat types Threats based on source • Which subscribers are targeted
• Kind of threats for that subscriber

Which networks are • Where are they targeted from

Frequency of different originating threats, and what • Are they targeted from multiple sources?
message types kinds of threats

Signalling Threat
Aggregation Reporting
Events

Reporting
Threat
Categorisation
Intuitive Visibilit • Message Type
GUI
• Customisable to • yOn individual events • Threat Type
customer needs
• On aggregated events • Criticality of Threat
• number of threats
• Scheduled reporting is • number of threats from each GT
supported Copyright Cellusys 2023
 SMS Firewall
Secure and monetise your SMS traffic–properly.

This Tier 1 solution provides security against SMS spam, fraud, and other threats, increases revenue by
blocking grey routes, and improves subscriber experience. This, in turn, reduces subscriber churn, and
lowers customer service and call center costs.

Detailed trend analy sis

Fully compliant
with GSMA IR.70/IR.71

Powerful rules engine, with

unlimited matching criteria

Highly scalable to handle

large increases in traffic

Automatic real-time threat detection Real-time alerting

• Scanning SMS for threats as • Email and SMMP
defined in GSMA IR.70/IR.71 • Individual user and/or group
• Message Signatures for A2P alerting
content detection

Customised traffic analytics Flexible, powerful rule system

• Detect threats from historical • Predefined Rules supported
traffic analysis • Define custom policies to
address specific needs

Advanced SMS Classification

Identical/similar SMS content is detected and signature created:

Rules engine uses tags in policy enforcement

Signatures used in customised A2P monetisation reports

A2P/P2P/SPAM Enterprise
(e.g. Facebook, Google, Instagram, etc.)

SMS type Any other classification/tag

(e.g. OTP, Info, Marketing, etc.)

Cellusys SMS Home Router

Delivered on the same platform as SMS Firewall:
Force all SMS
Hide real Block direct delivery through firewall
IMSI/MSC details of SMS to MSCs
Copyright Cellusys 2023
 Call Control Call Fraud
costs MNOs
A voice firewall that acts as a single point in the network to detect and prevent 14 Billion per
voice fraud and provides centralised call visibility for business intelligence year
based on realtime control of call setup and management.

Protection against revenue-depleting call frauds: • Centralised voice fraud control

• Realtime detection and prevention
• IRSF • SIM Box
• Visibility for business intelligence
• Wangiri • Flash Calls
• Reduced operational complexity
• Robo-Calling • Call Spoofing
• Simple integration

Multiple Sources
• Multiple MSCs It is operationally inefficient to monitor
data for the same call at multiple points in
• Roaming Calls logs
the network and to manage different
• Different log formats integration methods with different
• CDRs vendors

Single point of visibility and

control

Roaming Experience
Fraud Management Billing Verification
Limit or block calls to high
Signalling-based Realtime, accurate CDRs
cost destinations (much
faster than NRTRDE)
Take action on Integration
threats in realtime with external systems
Enable short code dialling
Integration with FMS Consistent records
Correct dialled digits to
improve completion rate

Copyright Cellusys 2023

 SMS Anti-Phishing
Prevent SMS phishing, Flubot, and other malware. Ensure every URL delivered by SMS to
every subscriber is safe and secure. The solution verifies every URL in every SMS message
to categorise URLs using a comprehensive and advanced database of verified secure URLs,
instead of relying on block lists.

SMS Anti-Phishing ensures that

every message sent to every subscriber
contains a link that is safe to open

Deployed in the core network

Using real-time Zero Trust security Protect

methodology (assume all links are
dangerous until verified), not blocklists Subscribers from scams

Your brand and reputation

Prevent handset infections initiated by
smishing – malware/adware/trojans etc. A2P SMS as a revenue channel

Solution for smishing

…only deliver links that

you can verify are safe to open

SMS messages Messages with URLs Recipient receives SMS

come to operator are categorised message with validation,
warning, or blocked
May be filtered URL is sent to Phishing notification
by SMS firewall Threat Intelligence
database for verification
May contain links
Copyright Cellusys 2023
Steering of Roaming
The combination of an extensive rules engine with Multi-tenant functionality
advanced reporting and analytics capabilities allows you (e.g. for MVNO)
to hit more targets on the basis of traffic, without
compromising subscriber quality of service. Set your
network apart and gain the loyalty of your subscribers. Integrates with all
popular OTA platforms
• Improve subscriber experience with precision
control over outbound roamers
Migration from other
• Maximise profits from wholesale roaming agreements platforms made easy

• Strike better deals thanks to accurate analytics.

Border steering

National Steering

Active steering for 2G/3G,

4G/LTE and NSA 5G
networks

Supports VolTE steering and

CSFB

Provision of highly-accurate & responsive steering with a focus on subscriber QoS

Avoid steering in areas Flexible roamer segmentation IoT roaming control

of poor coverage for fine-grained steering
• Handset-based steering
• Steer on services–not just subscribers
• Service-based attach

Hybrid Steering Reporting

• SS7- or Diameter-based steering • In-depth reporting provides
• OTA-based steering valuable roaming insights in
• Dynamic OTA generated real time
for each attach • Real-time and fine-grained
• Enables active roaming migration reporting and analytics
Copyright
Cellusys 2023
to achieve targets
 What is Roam Insight?
Roam Insight
To make better business decisions and roaming policies, you need to know more
than where your roamers are — You need to know what they are doing. Roam Insight combines
location data with subscriber data consumption metrics, to give you highly accurate QoS
metrics, global data roaming volumes, and more. Realtime visibility of all roaming traffic
improves negotiations, business intelligence, and subscriber experience.

• Complete view of inbound and outbound traffic

• Realtime – No waiting on TAP files
• Improve QoS of data and VoLTE for outbound roamers
• See data volumes by roaming partner, subscriber, group, application, and more

Know more than just

where
your subscribers are Improve negotiations with
accurate data of VPMN Identify silent inbound
quality roamers and IoT devices

Roam Insight tells you

what See data used by Steer by usage and
your subscribers are doing application, subscriber, quality instead of
and group subscriber

Addition of GTP-U and VoLTE traffic provides full roaming visibility

RealTime Business Individual Roamer Data

Intelligence – Data usage Consumption
per Roaming Partner

Usage-based
Centralized Visibility of classification and
all roaming traffic policies

Copyright Cellusys 2023

Welcome SMS
and SMS Campaign Manager
SMS outreach is a tool to provide inbound and outbound roamers with a variety
of information which can engage silent roamers, prevent fear of bill shock,
provide a better roaming experience, improve loyalty, and ultimately increase
roaming revenues.

Frequent travellers are among the most valuable subscribers and also the most
impacted by SMS outreach services. Typically these customers prefer a network
that provides them with helpful and accurate information when travelling abroad.

Supports 2G, 3G, 4G Integrated tariff messages

Send SMS to inbound Counter

and outbound fear of bill-shock
roamers

Intelligent /
Create dynamic
user-defined classification
message content
of roamers into groups

Integrates to CRM
Increase outbound and and other
inbound roaming revenue platforms
Copyright Cellusys 2023
 Insight – Broadband Data Analytics
The more accurate and accessible the data, the more control you have over your network.
Insight provides valuable near-real time analytics over the full data user and control planes
in any network. Offer targeted campaigns, analyse costs and revenue, and negotiate better
roaming deals using real data.

Analyses user data plane traffic DPI for content analysis

Supports
2G, 3G, 4G
Passive probes GTP v1/v2, Gi,
- no network intrusion Diameter, Radius (S1AP)

Real-time dashboards and long-term reporting

Preloaded and user-configurable reports/visualisation

VIP- IMSI- and wholesale reporting and monitoring—including IoT

Copyright Cellusys 2022

 About Cellusys

Built for groups

All products support
Towards a unified platform multi-tenant operation
for all products
• Centralised & distributed architecture
Currently applies to options to accommodate high-control
and high-autonomy groups
all firewall products
• Hybrid approach also supported for
autonomous and dependent opcos
Promotes ease of adoption
Hub control functionality: admin server
Security and roaming platform deployment at group HQ allows rules to
merge on roadmap be sent & analytics to be gathered across
footprint

About Cellusys – Industry Recognition

Top Innovative Vendor

Tier 1 #1
Signalling Firewall Signalling
Tier 1: SMS Firewall Firewall
Tier 1: Signalling Firewall #1
Steering #1 Steering Signalling Tier 1:
of Roaming Top Innovative Vendor of Roaming Firewall SMS Firewall

Tier 1: #1
Tier 1: Signalling Firewall Kaleido Champion Signalling
SMS Firewall SMS Firewall Firewall
Steering of Roaming # 1 Steering
Top Innovative Vendor
Roaming Analysis & VAS
Fraud Management
of Roaming

Our mission is to empower CSPs by reliably

delivering flexible signalling software and solutions
Copyright Cellusys 2023
www.cellusys.com | [email protected] | +353 1 6425000 Copyright Cellusys 2023