Grandstream Networks UCM630 A Series - Fail2 ban

P a g e | 91
UCM630xA Series User Manual
Version 1.0.9.10
Figure 32: Configure Dynamic Defense
Fail2ban
Fail2Ban feature on the UCM630xA provides intrusion detection and prevention for authentication errors in SIP
REGISTER, INVITE and SUBSCRIBE. Once the entry is detected within "Max Retry Duration", the UCM630xA
will act to forbid the host for certain period as defined in "Banned Duration". This feature helps prevent SIP brute
force attacks to the PBX system.