Pakistan telecom authority says web management system is not ‘firewall’

The Pakistan Telecommunication Authority (PTA) has stated that its Web Management System (WMS) is not a "firewall" and has never been referred to as such by the authority or telecom operators.

The statement comes two days after a report published by Nukta raising concerns over the system’s reliance on older technology.

The PTA emphasized that the WMS operates in a non-intrusive manner, adhering to global standards while ensuring user privacy.

It said that the system governs objectionable content, such as child pornography and blasphemous material, based on specific reports or identification, rather than broad surveillance.

“There has been no government expenditure on the WMS,” the PTA stated, adding that the system was jointly funded by telecom operators, including Long Distance and International (LDI) licensees, Cellular Mobile Operators (CMOs), and Cable Landing Station (CLS) operators.

The PTA also claimed the WMS does not rely on outdated technology or lacks privacy safeguards. It said that the system has been operational in various forms since 2008 and was developed under directives from the Supreme Court. Recent upgrades have aimed to enhance its capabilities, the authority added.

The authority reiterated that the WMS is used exclusively for combating grey traffic and removing objectionable content, maintaining its commitment to global best practices and safeguarding user privacy.

Nukta, quoting officials in its report, had said that WMS lacks artificial intelligence capabilities to proactively identify or block fake news and controversial content.

WMS is unable to differentiate between fake and real content in real-time, PTA officials revealed during a recent briefing. “Our system determines those responsible after fake news or illegal content spreads. Real-time monitoring is not possible,” said Muhammad Mukaram Khan, PTA’s Director General of Cyber Vigilance.

Background and cost

The WMS, implemented in 2018 at the Supreme Court’s directive, has cost telecom operators and long-distance international (LDI) operators PKR 35 billion over five years. PTA clarified that the system was provided by mobile phone operators, with no direct investment from the government.

The controversial system, originally acquired from Canadian company Sandvine for $18.5 million, uses Deep Packet Inspection technology. This enables VPN traffic blocking and internet surveillance but does not include artificial intelligence to identify fake news or preempt controversial content.

Operational limitations

The PTA’s web management relies on 72 monitoring points, including reports from organizations such as the Ministry of Religious Affairs and telecom operators. “We do not block any website without proper legal process,” Khan said, adding that actions are based on court orders or complaints.

The system blocks illegal content through a procedure that includes notifying platforms to remove offending material. If the content is removed, the platform remains accessible. Recent high-profile incidents, such as fake news about Punjab college student and social media activity during the D-Chowk operation, have highlighted the system's reactive nature.

Criticism and surveillance concerns

The system has drawn criticism for its lack of AI and inability to monitor social media in real-time. Critics also point to the WMS’s role in enabling government surveillance of internet traffic, which has raised privacy concerns.

In December 2023, the WMS underwent upgrades and was tested on submarine internet cables SMW 3, 4, and 5 to enhance its capabilities. However, its reliance on outdated technology continues to limit its effectiveness in combating fake news and illegal content.