Content Filtering Support Overview
▀ Category-based Content Filtering Support
▄ Cisco ASR 5000 Series Product Overview
OL-22938-02
Apart from the advantages described previously, Category-based Content Filtering service reduces the requirement of
over-provisioning of capacity at neighboring gateway routers. It also eliminates requirements of external Server Load
Balancers and enhances the accuracy in subscriber charging records.
The Category-based Content Filtering solution has the following logical functions:
Deep Packet Inspection (DPI) for Content Rating (event detection and content extraction)
Content Rating Policy Enforcement; for example, permit, discard, deny, redirect
Content-ware accounting CF-EDR generation for events of interest
ECS and Content Filtering Application
The Category-based Content Filtering subsystem is integrated within the Enhanced Charging Service (ECS) subsystem.
Although it is not necessary to provision content-based charging in conjunction with content filtering, it is highly
desirable as it enables a single point of deep-packet inspection for both services. It also enables a single policy decision
and enforcement point for both services thereby streamlining the required number of signaling interactions with external
AAA/Policy Manager servers. Utilizing both services also increases billing accuracy of charging records by insuring
that mobile subscribers are only charged for visited sites content.
The Category-based Content Filtering solution uses Content Filtering Policy to analyze the content requested by
subscribers. Content Filtering Policy provides a decision point for analyzed content on the basis of its category and
priority.
The Category-based Content Filtering solution also utilizes ECS rulebases in order to determine the correct policy
decision and enforcement action such as accept, block, redirect, or replace. Rulebase names are retrieved during initial
authentication from the AAA/Policy Manager. Some possible examples of rulebase names include Consumer,
Enterprise, Child, Teen, Adult, and Sport. Rulebase names are used by the ECS subsystem to instantiate the particular
rule definition that applies for a particular session. Rulebase work in conjunction with a content filtering policy and only
one content filtering policy can be associated with a rulebase.
Important:
For more information on rulebases and rule definitions, refer to the
Enhanced Charging Services
Administration Guide
.
The ECS subsystem includes L3–L7 deep packet inspection capabilities. It correlates all L3 packets with higher layer
criteria such as URL detection within an HTTP header, it also provides stateful packet inspection for complex protocols
like FTP, RTSP, and SIP that open ports for the data path.
The Content Filtering subsystem uses the deep-packet inspection capabilities of ECS for URL/URI extraction.
ECS functionality is managed by the following components:
Session Controller (SessCtrl)
: The SessCtrl runs on the primary SPC/SMC and is responsible for managing
ECS and Content Filtering services.
Session Manager (SessMgr)
: A single SessMgr treats ECS charging and Content Filtering that is applicable to
common subscriber sessions.
Summary of Contents for ASR 5000 Series
Page 1: ......
Page 26: ......
Page 48: ...New In Release 10 0 SCM Features Cisco ASR 5000 Series Product Overview OL 22938 02 ...
Page 50: ......
Page 58: ......
Page 68: ......
Page 126: ......
Page 138: ......
Page 146: ......
Page 218: ......
Page 236: ......
Page 356: ......
Page 374: ......
Page 422: ......
Page 496: ......
Page 572: ......
Page 654: ......
Page 700: ......
Page 726: ......
Page 784: ......
Page 816: ......
Page 844: ......
Page 906: ......
Page 926: ......
Page 942: ......
Page 943: ...Cisco ASR 5000 Series Product Overview OL 22938 02 Chapter 30 Technical Specifications ...
Page 966: ......
Page 972: ......