Question: In a Lawful Interception (LI) scenario, as per 3GPP security standards, what happens to incoming intercepted data at the Mediation Function (MF) if the receiving end system (Law Enforcement Monitoring Facility - LEMF) or transit network is down for an extended period?
Option 1: The MF will continuously buffer the data until the LEMF or transit network is restored.
Option 2: The intercepted data is immediately redirected to a secondary LEMF for uninterrupted delivery.
Option 3: The MF will attempt to establish a temporary connection with an alternative intercepting node.
Option 4: The incoming intercepted data from the intercepting nodes to the MF will be discarded until the LEMF or transit network is operational again.
Explanation: This is because, according to the described procedure for handling extended downtime of the receiving end (LEMF) or transit network, local buffering at the MF has its limits. If these are exceeded due to a prolonged outage, the MF must discard incoming intercepted data to prevent overflow, ensuring system integrity until normal operations can resume.