Fortinet black logo

FortiVoice Phone System Administration Guide

Home FortiVoice 6.4.0 FortiVoice Phone System Administration Guide
6.4.0
7.0.2
7.0.1
7.0.0
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.2
6.0.1
6.0.0
5.3.26
5.3.25
5.3.24
5.3.22
5.3.19
5.3.0

Blocking SIP device IPs

Blocking SIP device IPs

The FortiVoice unit automatically blocks the IP addresses of the SIP devices that initiate the attacks against any extensions based on the thresholds and parameters set. For more information on configuring security settings, see Configuring intrusion detection.

For blocked IPs, you may select an IP to delete it, add it to the exempt list if it is wrongly blocked, and view its blocked history.

For auto exempt IPs, you may select an IP to delete it if you find it suspicious.

To view the blocked IPs, go to Monitor > Security > Blocked IP.

To view the exempted IPs, go to Monitor > Security > Auto Exempt IP.

Setting the security parameters

You can use the CLI to set the threshold for blocking IPs and sending alert email (the default is 50 attempted logins per minute), the time interval to check the phone call activities (the default is 60 seconds), and the maximum notification emails to send after the threshold is reached (the default is 100).

config security sip-authentication-failure

set threshold

set interval

set max-notification

end

Previous
Next

Blocking SIP device IPs

The FortiVoice unit automatically blocks the IP addresses of the SIP devices that initiate the attacks against any extensions based on the thresholds and parameters set. For more information on configuring security settings, see Configuring intrusion detection.

For blocked IPs, you may select an IP to delete it, add it to the exempt list if it is wrongly blocked, and view its blocked history.

For auto exempt IPs, you may select an IP to delete it if you find it suspicious.

To view the blocked IPs, go to Monitor > Security > Blocked IP.

To view the exempted IPs, go to Monitor > Security > Auto Exempt IP.

Setting the security parameters

You can use the CLI to set the threshold for blocking IPs and sending alert email (the default is 50 attempted logins per minute), the time interval to check the phone call activities (the default is 60 seconds), and the maximum notification emails to send after the threshold is reached (the default is 100).

config security sip-authentication-failure

set threshold

set interval

set max-notification

end

Previous
Next