Abstract: Techniques for enforcing policies on Internet of Things (IoT) device communications are disclosed. Information associated with a network communication of an IoT device is received. The received information is used to determine a device profile, including a device type, to associate with the IoT device. A recommended security policy to be applied to the IoT device by a security appliance is generated.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving, at the session management node, an initial request message, the initial request message including at least one subscription identifier; determining that the session management node does not have access to a subscription record associated with the at least one subscription identifier; generating a transient subscription record based on the initial request message; and processing the initial request message based on the initial request message and the transient subscription record.

Abstract: Various exemplary embodiments relate to a method performed by a policy and charging rules node (PCRN), the method including: receiving an event trigger and a restriction filter rule associated with a first set of policy and charging control (PCC) rules from a policy and charging enforcement node (PCEN) indicating that a subscriber is out of credit; producing a second set of PCC rules to implement the restriction filter to handle the out of credit status of the subscriber; installing the second set of PCC rules; receiving an indication that the subscriber has received a reallocation of credit; and uninstalling the second set of PCC rules after receiving an indication that the subscriber has completed the reallocation of credit operation.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving, at the session management node, an initial request message, the initial request message including at least one subscription identifier; determining that the session management node does not have access to a subscription record associated with the at least one subscription identifier; generating a transient subscription record based on the initial request message; and processing the initial request message based on the initial request message and the transient subscription record.