Oracle Communications CNC Security Edge Protection Proxy,SEPP Partner Validated

Deploys on multiple cloud-native platforms for flexibility and scalability, including Oracle Cloud (OCI) with a single SLA for product and infrastructure.
• Supports cloud-native templates and lifecycle management, and can be onboarded into a CSP’s existing management and orchestration stack.
• Enables canary releases via CI/CD: inspects API version attributes in NF service profiles during NF registration (or updates them). If a new API version matches a configured value, it’s treated as a canary; once deployed, production is upgraded to the canary version.
• Automates certificate management by integrating with operator PKI using CMPv2. This is essential because 5G interfaces are secured; certificate renewal or rejection can cause unexpected outages. Automation helps maintain SLAs

Ensures disaster recovery, reduces risk, and supports continued operation during Oracle Communications SEPP failures.
• Optimizes and scales resources to avoid overutilization from dedicated gateways for intra-PLMN and inter-PLMN traffic.
• Supports the SBI Message Priority Header by modifying relevant headers to prevent routing failures in the core network.
• Enhanced routing enables traffic to or from multiple PLMNs associated with a given remote Oracle Communications SEPP.
• Ingress and egress rate limiting protects the operator network from flooding by roaming messages from partners.
• Enables alternate routing across remote SEPPs to increase overall network resiliency.

Provides ingress rate limiting at the gateway to secure the network when aggregated ingress traffic from any registered NF instance/remote SEPP exceeds allowed limits. If exceeded, Oracle Communications SEPP drops processing and returns an error code. Ingress global rate limiting lets users configure acceptable traffic rates per consumer NF instance and the maximum number of incoming messages per time period.
• Enables topology hiding and secures inter‑PLMN messaging by providing message filtering and policing on inter‑PLMN control plane interfaces. Topology hiding protects network element addresses, helps prevent unauthorized access or service disruption attacks, and conceals identity information in messages leaving a PLMN.
• Supports NF authentication using TLS certificates and supports HTTPS (minimum 5G NF requirement per 3GPP TS 33.501). HTTPS provides end‑to‑end encryption to protect data in transit.
• Supports GSMA FS.36 category 0, 1, and 2 countermeasures.

• Support for outsourced SEPP.
• Support for IPX providers and roaming hubs.
• Consolidate and secure operator group roaming.
• Integration with traditional roaming value‑added services (for example, SMS Welcome and Steering of Roaming).
• Traffic monitoring and integration with Oracle Data Director and other analytics solutions.