AudioCodes Mediant MSBR Series User Manual

Version 7.2 403 Mediant MSBR
Reference Guide 60. ids
Command Description
major-alrm-thr
Defines the threshold that if crossed a major severity alarm
is sent.
minor-alrm-thr
Defines the threshold that if crossed a minor severity alarm
is sent.
reason {abnormal-
flow|any|auth-
failure|connection-
abuse|establish-
fail|malformed-msg}
Defines the type of intrusion attack.
threshold-scope
{global
|ip|ip-port}
Defines the source of the attacker to consider in the
device's detection count.
threshold-window
Defines the threshold interval (in seconds) during which
the device counts the attacks to check if a threshold is
crossed.
Command Mode
Privileged User
Example
This example configures this IDS policy rule: If 15 malformed SIP messages are received
within a period of 30 seconds, a minor alarm is sent. Every 30 seconds, the rule’s counters
are cleared. If more than 25 malformed SIP messages are received within this period, the
device blacklists for 60 seconds the remote IP host from where the messages were received:
(config-voip)# ids policy 0
(policy-0)# ids rule 1
(rule-0/1)# reason malformed-msg
(rule-0/1)# threshold-scope ip
(rule-0/1)# threshold-window 30
(rule-0/1)# deny-thr 25
(rule-0/1)# deny-period 60
(rule-0/1)# minor-alrm-thr 15
(rule-0/1)# major-alrm-thr 20
(rule-0/1)# critical-alrm-thr 25
(rule-0/1)# activate

AudioCodes Mediant MSBR Series Specifications

General

Product Series	Mediant MSBR Series
Category	Network Router
VoIP Protocols	SIP, H.323
Fax Support	T.38, G.711 pass-through
Integrated Firewall	Yes
VPN Support	IPSec, L2TP, PPTP
Management	Web GUI, CLI, SNMP, TR-069
FXS Ports	Up to 8
FXO Ports	Up to 2
Voice Codecs	G.711, G.729, G.723.1
Router Features	NAT, DHCP, QoS
Security Features	Firewall, DoS protection
Redundancy	Optional
Dimensions	1U Rack Mountable
Operating Temperature	0°C to 40°C
Storage Temperature	-20 to 70 °C
Humidity	Up to 95% non-condensing