PDN Gateway Overview
▀ Features and Functionality - Inline Service Support
▄ Cisco ASR 5x00 Packet Data Network Gateway Administration Guide
70
Features and Functionality - Inline Service Support
This section describes the features and functions of inline services supported on the P-GW. These services require
additional licenses to implement the functionality.
This section describes the following features:
Content Filtering
Header Enrichment: Header Insertion and Encryption
Mobile Video Gateway
Network Address Translation (NAT)
Peer-to-Peer Detection
Personal Stateful Firewall
Traffic Performance Optimization (TPO)
Content Filtering
The Cisco P-GW offers two variants of network-controlled content filtering / parental control services. Each approach
leverages the native DPI capabilities of the platform to detect and filter events of interest from mobile subscribers based
on HTTP URL or WAP/MMS URI requests:
Integrated Content Filtering: A turnkey solution featuring a policy enforcement point and category based rating
database on the Cisco P-GW. An offboard AAA or PCRF provides the per-subscriber content filtering
information as subscriber sessions are established. The content filtering service uses DPI to extract URLs or
URIs in HTTP request messages and compares them against a static rating database to determine the category
match. The provisioned policy determines whether individual subscribers are entitled to view the content.
Content Filtering ICAP Interface: This solution is appropriate for mobile operators with existing installations of
Active Content Filtering external servers. The service continues to harness the DPI functions of the ASR 5x00
platform to extract events of interest. However in this case, the extracted requests are transferred via the
Integrated Content Adaptation Protocol (ICAP) with subscriber identification information to the external ACF
server which provides the category rating database and content decision functions.
Integrated Adult Content Filter
Provides a value-added service to prevent unintended viewing of objectionable content that exploits underage children.
Content Filtering offers mobile operators a way to increase data ARPU and subscriber retention through a network-
based solution for parental controls and content filtering. The integrated solution enables a single policy decision and
enforcement point thereby streamlining the number of signaling interactions with external AAA/Policy Manager
servers. When used in parallel with other services such as Enhanced Content Charging (ECS) it increases billing
accuracy of charging records by insuring that mobile subscribers are only charged for visited sites they are allowed to
access.
The Integrated Adult Content Filter is a subscriber-aware inline service provisioned on an ASR 5x00 running P-GW
services. Integrated Content Filtering utilizes the local DPI engine and harnesses a distributed software architecture that
scales with the number of active P-GW sessions on the system.
