Data sheet

P a g e | 71
UCM6200 Series User Manual
Version 1.0.19.27
Table 15: UCM6200 Firewall Dynamic Defense
Dynamic Defense
Enable
Enable dynamic defense. The default setting is disabled.
Blacklist Update
Interval
Configure the blacklist update time interval (in seconds). The default setting is
120.
Connection
Threshold
Configure the connection threshold. Once the number of connections from the
same host reaches the threshold, it will be added into the blacklist. The default
setting is 100.
Dynamic Defense
Whitelist
Allowed IPs and ports range, multiple IP addresses and port range.
For example:
192.168.5.100-
192.168.5.200 1500:2000
The following figure shows a configuration example like this:
• If a host at IP address 192.168.5.7 initiates more than 20 TCP connections to the UCM6200 within 1 minute,
it will be added into UCM6200 blacklist.
• This host 192.168.5.7 will be blocked by the UCM6200 for 500 seconds.
• Since IP range 192.168.5.100-192.168.5.200 is in whitelist, if a host initiates more than 20 TCP connections
to the UCM6200 within 1 minute, it will not be added into UCM6200 blacklist. It can still establish TCP
connection with the UCM6200.
Figure 29: Configure Dynamic Defense