• Since IP range 192.168.5.100-192.168.5.200 is in the whitelist if a host initiates more than 20 TCP
connections to the UCM630X it will not be added to the UCM630X blacklist. It can still establish a TCP
connection with the UCM630X.
Figure 34: Configure Dynamic Defense
Fail2ban
Fail2Ban feature on the UCM630X provides intrusion detection and prevention for authentication errors in SIP
REGISTER, INVITE and SUBSCRIBE. Once the entry is detected within "Max Retry Duration", the UCM630X
will act to forbid the host for a certain period as defined in "Banned Duration". This feature helps prevent SIP
brute force attacks on the PBX system.
To Next Page
Loading...
Need help?
General
