• Since IP range 192.168.5.100-192.168.5.200 is in whitelist, if a host initiates more than 20 TCP connections
to the UCM6100 within 1 minute, it will not be added into UCM6100 blacklist. It can still establish TCP
connection with the UCM6100.
Figure 30: Configure Dynamic Defense
Fail2ban
Fail2Ban feature on the UCM6100 provides intrusion detection and prevention for authentication errors in SIP
REGISTER, INVITE and SUBSCRIBE. Once the entry is detected within "Max Retry Duration", the UCM6100
will act to forbid the host for certain period as defined in "Banned Duration". This feature helps prevent SIP brute
force attacks to the PBX system.
To Next Page
Loading...
Need help?
General
