GGSN (Gateway GPRS Support Node)

The Gateway GPRS Support Node is the 2G/3G packet-core element that connects the mobile network to external IP networks, allocates subscriber IP addresses, and applies charging. It is the predecessor of the 4G PGW. GGSNs terminate GTP tunnels from SGSNs and are reachable from roaming partners over GRX, making them frequent targets of GTP-based abuse such as session hijacking and IMSI disclosure when GTP firewalls are absent or misconfigured.

Categories: Core NetworkSignalingRoaming and Interconnect

GGSN in context

The mobile core is where subscriber sessions, mobility and policy live. In 4G it is the EPC (MME, HSS, S/PGW); in 5G it is the Service-Based Architecture with AMF, SMF, UPF, AUSF, UDM and the NRF. Core exposure is the difference between a single-subscriber leak and a fleet-wide breach.

Signaling protocols carry the control-plane instructions that set up calls, register subscribers, hand over sessions and route SMS. SS7, Diameter, GTP-C and SIP are the four dominant families, and interconnect exposure of any of them is treated by GSMA FS.11 / FS.19 / FS.20 as a top-tier telecom risk.

To place GGSN in the wider telecom-security picture, review GTP, GTP-U Smuggling, HLR, SGSN, GTP-C and GTP Firewall.

Related terms

Equipment

User plane and packet gateways (UPF, PGW, SGW, GGSN)

Articles in the P1 mobile network security guide

Related topic hubs

  • GTP Firewall GSMA FS.20 GTP-C/GTP-U screening on GRX/IPX borders.
  • Signaling Firewall Unified SS7/Diameter/GTP/SMS signaling firewall framework.
  • Roaming Security IPX/GRX interconnect risk, home-routed vs local-breakout, SEPP.
  • GTP Security GTP-C/GTP-U threats across S5/S8, N3/N9 and GRX/IPX borders under GSMA FS.20.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.