Securing the Telecom Frontier: How Fortinet SecOps Builds Resilience Across the Stack

By Andre Lombaard, Network and Security Architect at NEC XON

Telecoms Under Fire
Telecom networks are no longer just critical infrastructure — they’ve become strategic targets for cybercriminals. From sophisticated nation-state actors to profit-driven cybercriminals, the telecom sector is facing unprecedented security pressure.

Recent breaches underscore the severity of the threat. The SK Telecom compromise exposed internal segmentation weaknesses. Advanced persistent threat group APT41 (also known as Wicked Panda) continues to infiltrate Asian telcos to harvest credentials and exfiltrate sensitive data. In South Korea, coordinated cyber campaigns have revealed the risks tied to cloud migration, legacy systems, and endpoint vulnerabilities.

In this high-stakes landscape, securing both the enterprise IT and core telecom infrastructure is non-negotiable. That’s where Fortinet’s SecOps framework — enhanced by NEC XON’s delivery expertise — comes in.

Inside the Modern threat Landscape
Telecom providers operate some of the most complex digital ecosystems, integrating core networks, edge compute environments, and enterprise systems. But this complexity also creates gaps — and adversaries are exploiting them.

Key Challenges:

• Multi-domain operations spanning IT, core, and edge
• Protection of subscriber data and control-plane traffic
• Interoperability across legacy and modern infrastructure
• Need for real-time detection and coordinated response mechanisms

Fortinet SecOps: Security Built for Complexity
Fortinet’s SecOps solution delivers an integrated, fabric-based approach to telecom security. It provides multi-domain visibility, automation, and intelligent threat response capabilities across hybrid environments.

At its core, the Fortinet SecOps solution enables visibility across all operational layers — from enterprise IT to the mobile edge — and is powered by a tightly integrated security stack that includes FortiAnalyzer, FortiDeceptor, FortiNDR, and FortiSOAR. This integration supports security incident and event management (SIEM), network detection and response (NDR), and automated orchestration for faster and smarter threat handling. Fortinet's Zero Trust Network Access (ZTNA) enforces strict access control for employees and third parties alike. Its SD-WAN and 5G-aware firewalls offer advanced filtering of subscriber and GTP traffic. Combined with policy-as-code and automation capabilities, the platform reduces manual effort, eliminates configuration drift, and accelerates response to evolving threats.

By correlating logs, events, traffic flows, and user behavior across domains, Fortinet delivers contextualised, actionable insights — essential for telcos operating in high-volume, multi-layered environments.

Strengthening Enterprise Security Within the Telco
Telcos aren’t just infrastructure and service providers; they are large enterprises managing internal systems such as HR, finance, customer portals, and service platforms. Fortinet enhances security across these layers by enabling granular segmentation through FortiGate firewalls with Virtual Domains (vDOMs), which ensure secure tenancy and separation of services. Email and endpoint defenses, powered by FortiMail and FortiEDR, mitigate phishing, ransomware, and insider threats. Identity management is strengthened via FortiAuthenticator, which integrates seamlessly with telco SSO systems to enforce secure access policies. And to ensure visibility and control across increasingly hybrid environments, FortiCWP and Fabric Connectors enable robust Cloud Security Posture Management (CSPM) for public clouds like AWS and Azure, as well as telco private clouds.

Securing the Telco Stack - Core Edge
Modern telco architecture spans core networks (EPC/5GC), mobile edge computing (MEC), and access and backhaul layers — each with unique threat surfaces. Fortinet addresses these layers through a combination of carrier-grade firewalls capable of deep GTP inspection and subscriber traffic analysis, and robust DDoS protection using FortiDDoS and edge firewall scrubbing. Network segmentation is enforced across both virtual and physical network functions (VNF/PNF), limiting the lateral movement of threats. Real-time detection capabilities are enhanced through FortiDeceptor and honeynet deployments, which create traps for threat actors and expose attacker behavior. Automated incident response is enabled through FortiSOAR, which can isolate affected network segments or dynamically adjust policies to contain breaches as they unfold.

Operational Resilience with SecOps
Effective telecom security demands more than alerts — it requires contextual response and automation. Fortinet enables this shift through a platform that delivers full observability across the network using FortiAnalyzer and FortiNDR. Security teams can build and customise incident response playbooks in FortiSOAR, handling advanced scenarios such as BGP route poisoning, GTP abuse, and internal lateral movement. Use case automation extends to detecting rogue base stations, preventing SIM-based fraud, and identifying anomalies in VoIP traffic. Importantly, Fortinet facilitates threat intelligence sharing across internal business units and with regulatory bodies, helping telcos align with compliance requirements while staying ahead of adversaries.

NEC XON + Fortinet: Building Secure Telecom Operations
At NEC XON, we help telecom operators go beyond reactive protection and adopt a proactive, integrated security strategy. Leveraging Fortinet’s comprehensive security tools, we build fully integrated Security Operations Centers (SOCs) tailored to telecom environments. We conduct in-depth security posture audits and help telcos define roadmaps aligned with evolving threat landscapes. Our team enables end-to-end policy automation across enterprise and telco infrastructure and provides hands-on incident response and SecOps-as-a-Service. This allows operators to reduce mean time to response (MTTR), streamline security processes, and confidently scale technologies such as 5G, IoT, and SD-WAN.

Smarter Security for a New Era of Telecom
As cyber threats evolve and customer expectations grow, telcos must rethink security from the ground up. It’s no longer enough to deploy more tools — providers need smarter, integrated, telco-aware solutions.

​With Fortinet’s product framework and NEC XON’s implementation expertise, telecom operators can achieve deep, proactive security — from the cloud to the core, and from the user to the edge.

The future of telecom is fast, dynamic, and digital. With the right security in place, it can also be resilient.