Grandstream Networks UCM6510 - Fail2 Ban; Figure 27: Configure Dynamic Defense

P a g e | 81
UCM6510 IP PBX User Manual
Version 1.0.20.31
Figure 27: Configure Dynamic Defense
Fail2ban
Fail2Ban feature on the UCM6510 provides intrusion detection and prevention for authentication errors in
SIP REGISTER, INVITE and SUBSCRIBE and prevents SIP brute force attacks on the PBX system. Once
an IP address exceeds the allowed number of login or SIP authentication attempts within the configured
"Max Retry Duration" period, all SIP and HTTP requests from that IP address will be dropped, forbidding
web access and blocking further authentication attempts.