How can I block traffic based on port or protocol in GTP (GPRS Tunneling Protocol) ?

[mmorcali]

Hello
We use the Forticarrier license in VM08 to inspect GTP traffic and to place necessary restrictions. We want to block protocols such as Ping, SSH in GTP. Can you help us with this?

I also want to filter SCTP messages in GTP and block some of them. I can write sctp message filter and give the ppid value and block it, but this is not what I want. I want to catch the payload in SCTP and block it if it exceeds the hit count. How can I do this?

Thanks in advance

[dbhavsar]

Good day @mmorcali ,

- This might can help: https://docs.fortinet.com/document/fortigate/7.4.4/fortios-carrier/178563/general-gtp-profile-settin... let me know if you need anything else.

[mmorcali]

Hi @dbhavsar 

I know that document but it does not have information that i want to learn. I need more information about GTP feature. Also there is no use case about this case. 

Thank you anyway.