# GTP Message Filtering Settings

You can configure the security device to filter GTP packets and permit or deny them based on their message type. By default, the security device permits all GTP message types.

A GTP message type includes one or many messages. When you permit or deny a message type, you automatically permit or deny all messages of the specified type. For example, if you select to drop the sgsn-context message type, you thereby drop “sgsn context request”, “sgsn context response”, and “sgsn context acknowledge” messages. For more information on message types, see Supported Message Types.

You permit and deny message types based on the GTP version number. For example, you can deny message types for one version while you permit them for the other version.

### To Permit or Deny Message Types

1. Select the check boxes of the message types you want to drop. Clear the check box of the message types you want to permit.

You can permit and drop message types based on the GTP version number. For example, you can deny message types for one version while you permit them for the other version.

You can optionally select or clear the All Above checkbox to drop or permit all message types for version 0 or for version 1.

2. Click Apply.

## Filtering by Message Type

By default, the security device permits the following GTP message types and denies all other types:

- echo

- create-pdp

- delete-pdp

- update-pdp

- version-not-supported

- error-indication

- G-PDU (or T-PDU)

For a complete list of messages supported on the security device, see GTP Message Types.