Chapter 4 FortiOS Carrier : GTP identity filtering : Configuring APN filtering in FortiOS Carrier
  
Configuring APN filtering in FortiOS Carrier
To configure APN filtering go to Security Profiles > Carrier > GTP Profile. Select a profile or create a new one, and expand APN filtering.
 
When you are configuring your Carrier-enabled FortiGate unit’s GTP profiles, you must first configure the APN. It is critical to GTP communications and without it no traffic will flow.
For more information on APN, see “Access Point Number (APN)”.
 
Enable APN Filter
Select to enable filtering based on APN value.
Default APN Action
Select either Allow or Deny for all APNs that are not found in the list. The default is Allow.
Value
Displays the APN value for this entry. Partial matches are allowed using wildcard. For example *.mcc333.mcn111.gprs would match all APNs from country 333 and carrier 111 on the gprs network.
Mode
Select one or more of the methods used to obtain APN values.
Mobile Station provided - The APN comes from the mobile station where the mobile device connected. This is the point of entry into the carrier network for the user’s connection.
Network provided - The APN comes from the carrier network.
Subscription Verified - The user’s subscription has been verified for this APN. This is the most secure option.
Action
One of allow or deny to allow or block traffic associated with this APN.
Delete icon
Select to remove this APN entry from the list.
Edit icon
Select to change the information for this APN entry.
Add APN
Select to add an APN to the list. Not active while creating GTP profile, only when editing an existing GTP profile.
Save all changes before adding APNs. A warning to this effect will be displayed when you select the Add APN button.
The Add APN button is not activated until you save the new GTP profile. When you edit that GTP profile, you will be able to add new APNs.