User Manual

P a g e | 63
UCM6200 Series User Manual
Version 1.0.15.16
• Since IP range 192.168.5.100-192.168.5.200 is in whitelist, if a host initiates more than 20 TCP connections
to the UCM6200 within 1 minute, it will not be added into UCM6200 blacklist. It can still establish TCP
connection with the UCM6200.
Figure 29: Configure Dynamic Defense
Fail2ban
Fail2Ban feature on the UCM6200 provides intrusion detection and prevention for authentication errors in SIP
REGISTER, INVITE and SUBSCRIBE. Once the entry is detected within "Max Retry Duration", the UCM6200
will act to forbid the host for certain period as defined in "Banned Duration". This feature helps prevent SIP brute
force attacks to the PBX system.