Lawful intercept is a process that enables a law enforcement agency to perform electronic surveillance on an individual (a
target) as authorized by a judicial (court) or administrative order. To facilitate the lawful intercept process, certain legislation
and regulations require service providers and Internet Service Providers (ISPs) to implement their networks to explicitly
support authorized electronic surveillance.
Surveillance is performed through the use of wiretaps on traditional telecommunications and internet services in voice, data,
and multiservice networks. The law enforcement agencies deliver a request for a wiretap to the target’s service provider who
is responsible for intercepting data communication to and from the individual. The service provider uses the target’s IP address
to determine which of its edge devices handles the target’s traffic (data communication). The service provider then intercepts
the target’s traffic as it passes through the device, and sends a copy of the intercepted traffic to the LEA without the target’s
The Lawful Intercept feature supports the Communications Assistance for Law Enforcement Act (CALEA), which describes how service
providers in the United States must support lawful intercept. Currently, lawful intercept is defined by the following standards:
For information about the Cisco lawful intercept solution, contact your Cisco account representative.
The Lawful Intercept feature supports the interception of IPv4 protocol as defined by the citapStreamprotocol object in the
CISCO-IP-TAB-MIB that includes voice and date interception.