LI APPLIANCE
Temporary Lawful Interception Box for Short-Term Investigations
Capture, mediation and secure handover in one self-contained unit. Installed quickly, operated securely and removed without long-term changes to your network.

A temporary lawful interception box is a self-contained appliance that captures, mediates and securely hands over intercepted VoIP, IP and messaging traffic for short-term investigations. ICS designed its temporary lawful interception box for situations where full LI infrastructure is not available or not practical. It is installed quickly, operated securely and removed without long-term changes to the network.
עובדות עיקריות
- All-in-one: capture, mediation and secure handover in a single unit.
- שירותים: VoIP, IP and messaging interception.
- Sizes: predefined small, medium and high-capacity configurations.
- העברה: forwards IRI and CC to law enforcement monitoring facilities (LEMFs).
- Flexible role: runs standalone or as an extension of existing LI systems.
- Full support: planning, installation, configuration, training, test scenarios and acceptance by authorities.
When is a temporary lawful interception box the right choice?
The box fits wherever interception must start quickly and permanent infrastructure is missing or not worthwhile.
01
Small providers under the TKÜV threshold
In Germany, the TKÜV exempts systems with no more than 10,000 connected users from keeping permanent interception facilities. Orders must still be implemented, and a temporary box lets a small provider do so when one arrives.
02
New market entry
Operators launching a new service can be interception-ready before their permanent LI solution is in place. The box covers the gap until the full platform is live.
03
Network migration
During a core network change, the box keeps interception running on segments that are being moved, replaced or tested.
04
Events and temporary networks
Temporary networks for events, trials or pilot projects can still carry interception duties. A self-contained box covers them and is removed afterward.
How does the temporary lawful interception box work?
The box is placed at strategic points in the network where the relevant traffic passes. It combines three functions in one unit.
- Capture: it collects the traffic of targets defined on the basis of valid legal orders.
- גישור: it separates intercept-related information (IRI) from content of communication (CC) and prepares both for delivery.
- Secure handover: it forwards IRI and CC to the LEMF of the requesting authority.
Modern interfaces and flexible routing let the box adapt to different network designs. Handover is aligned with ETSI standards, such as the ETSI TS 102 232 series for IP-based services. Our articles on IRI and CC and on the HI1, HI2 and HI3 interfaces explain these building blocks.

Capabilities
01
Rapid deployment
The box arrives with pre-integrated software and optimized hardware. Installation takes little effort and needs no permanent changes to the core network.
02
Easy configuration
Targets, routing and handover destinations are set up through a clear configuration. Your team can operate the box after a short training.
03
Scalable capacity
Predefined small, medium and high-capacity configurations match the expected traffic. You choose the size that fits the investigation or the network.
04
Standalone or extension
Use the box as a complete interception solution, or add it to an existing LI setup to cover a new segment or extra load.
05
Tailored to your network
ICS adapts protocols, capacity and integration with mediation platforms, management systems and agency interfaces to your environment.
06
Clean removal
When the operation ends, the box is removed. Your network returns to its previous state without leftover components.
Technical overview
The table summarizes what the temporary lawful interception box provides. Details are tailored to each project.
| Feature | תיאור |
|---|---|
| Intercepted services | VoIP, IP and messaging |
| Functions | Capture, mediation and secure handover |
| פלט | IRI and CC to one or more LEMFs |
| העברה | Standards-aligned interfaces based on ETSI specifications |
| Capacity | Predefined small, medium and high-capacity configurations |
| Target activation | Based on valid legal orders |
| Operating modes | Standalone or extension of existing LI |
| Integration options | Mediation platforms, LIMS and agency interfaces |
| Network impact | Placed at strategic points, removed without long-term changes |
| שירותים | Planning, installation, configuration, training, testing and acceptance support |
Temporary box or permanent LI system?
A temporary box is built for speed and a limited scope. A permanent system is built for ongoing interception across the whole network. Many operators use both.
The box handles pilots, migrations and peaks. Daily operations run on a permanent platform with a מערכת לניהול יירוט חוקי and an פלטפורמת הגישור LI. Read our comparison of temporary LI boxes vs permanent systems for a detailed decision guide.
How does a deployment work?
ICS accompanies each project from the first call to the final removal.
1
Planning
ICS reviews the network, the services in scope and the legal requirements, and defines where the box will sit.
2
Sizing and tailoring
The team selects the capacity configuration, protocols and interfaces.
3
Installation
The box is installed at the agreed points in the network and connected to the handover destinations.
4
Configuration
Targets are set up on the basis of valid legal orders, and routing is defined.
5
Testing and acceptance
Test scenarios verify capture and delivery, and ICS supports acceptance by the authorities.
6
Training and operation
Your staff learn to operate the box securely, with ICS support in the background.
7
Removal
When the operation ends, the box is removed without long-term changes.
מדוע ICS
01
ניסיון של יותר מ-20 שנים
ICS has worked in telecommunications, lawful interception and compliance for more than two decades.
02
אישורים מרובים מטעם ה-BNetzA
ICS interception solutions have passed multiple acceptance procedures with the German Federal Network Agency.
03
עובדים בעלי סיווג ביטחוני
צוותנו קיבל אישור ביטחוני ממשרד הפנים הפדרלי הגרמני, והוא רשאי לטפל במידע מסווג.
04
One partner for the whole chain
From appliances to LIMS and mediation software, ICS delivers matching components and knows how they fit together.
שאלות נפוצות
What is a temporary lawful interception box?
A temporary lawful interception box is a self-contained appliance for short-term interception. It captures the traffic of targets named in a legal order, separates IRI from CC and forwards both securely to law enforcement. The ICS box supports VoIP, IP and messaging interception. It is installed quickly and removed without long-term changes to the network.
Which services can the box intercept?
The ICS box intercepts VoIP, IP and messaging services. It captures traffic at strategic points in the network, mediates it and delivers IRI and CC to the monitoring facility of the requesting authority. ICS tailors the supported protocols and interfaces to each network, so the box matches the services you actually offer.
Does a small German provider need interception capability?
Under the TKÜV, systems with no more than 10,000 connected users do not have to keep permanent interception facilities. The provider must still implement a lawful interception order when it receives one. A temporary box lets a small provider meet this duty without building permanent infrastructure. ICS can plan the deployment in advance, so the box is ready when needed.
How is the box different from a permanent LI system?
The box is self-contained, comes in predefined sizes and is designed for fast installation and clean removal. A permanent LI system is integrated into the network and manages interception continuously at full scale. The box suits pilots, migrations, events and ad-hoc orders. Many operators use it alongside a permanent platform or as a bridge until that platform is live.
Can the box work with our existing LIMS or mediation platform?
Yes. The box can run standalone or as an extension of existing lawful interception systems. ICS tailors integration with mediation platforms, management systems and agency interfaces. This lets you add capacity or cover a new network segment while keeping your current processes, order handling and handover destinations in place.
Does ICS support acceptance by the authorities?
Yes. ICS supports every step from planning and installation to configuration, training and test scenarios. This includes preparing and running acceptance procedures with the authorities where they are required. ICS interception solutions have received multiple BNetzA acceptances, and the team brings that experience to each temporary deployment.
An interception order arrived and your LI is not ready?
ICS can plan, install and test a temporary box for your network, including acceptance by the authorities.
