NIS2 DIRECTIVE (EU) 2022/2555 • ESSENTIAL ENTITY OPERATIONAL DEFENSE

Carrier Defense & CSIRT Dispatch Suite

Purpose-built operational cybersecurity suite for European Tier-1 MNOs, 5G Core Roaming (SEPP), subsea optical backhaul, and multi-protocol signaling firewalls. Validate Article 21 technical controls and automate Article 23 CSIRT-EU dispatch in real-time.

Authenticated Operator

—

Operator • Essential Scope

5G CORE SEPP

N32-c/f Active

FIPS-203 Kyber-1024 PQC

SUBSEA BACKHAUL

DWDM Layer-1 OTN

AES-256 GCM Bulk Wire-Speed

SIGNALING FIREWALL

1.48M msg/sec

SS7 / Diameter / GTP-C Active

ART. 21 AUDIT SCORE100%

10/10 Pass

Statutory Fine Risk: €0

3GPP TS 33.501 & GSMA PRD FS.34 / FS.36 Zero-Trust Roaming Interconnect

5G Security Edge Protection Proxy (SEPP) Engine

Application-layer N32-f JSON Web Signature (JWS) validation, PRACK payload filtering, and post-quantum TLS 1.3 transit.

HOME PLMN (hSEPP)MCC: 262 MNC: 01 (DE)

Core AMF:amf01.berlin.core

JWS Verification:ES256 + Kyber-1024

Active Peering:16 EU Carriers

Encapsulates end-to-end user claims before crossing untrusted IPX transit.

IPX TRANSIT MEDIATIONGSMA FS.36 Enforcement

Protocol:HTTP/2 over TLS 1.3

Modifications:Strict Allow-List Only

Tamper Status:0 Unauthorized Alterations

All JSON Web Signatures valid across Roaming N32-f pipeline.

VISITED PLMN (vSEPP)MCC: 208 MNC: 01 (FR)

Visited UDM:udm02.paris.core

SEPP Edge IP:194.12.44.18

Drop Rule:Auto-Quarantine Active

Decodes and applies cryptographic signature checks before delivering traffic to Visited 5G Core.

LIVE N32-f JWS WIRE-SPEED PACKET LOGBUFFER: 10,000 PACKETS/S

[2026-09-13T02:40:12.102Z] N32-c TLS 1.3 Handshake established with vSEPP (MCC: 208 MNC: 01).
[2026-09-13T02:40:12.115Z] Hybrid Kyber-1024 / X25519 key encapsulation succeeded. Session Key: pqc_sec_9942a.
[2026-09-13T02:40:12.144Z] N32-f JWS Payload validated. Algorithm: ES256, Digest: e3b0c44298fc1c149afbf4c8.
[2026-09-13T02:40:12.150Z] IPX Modification Policy verified per GSMA FS.36. Zero unauthorized claims detected.
[2026-09-13T02:40:12.158Z] Forwarded SBI Request: /namf-comm/v1/ue-contexts/imsi-262010049281/relocate.