Avaya Administering Aura Session Manager Release 6.1 Manual de usuario Pagina 389

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 532
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 388
Name Description
option is suitable for creating SIP Firewall
filtering rules for SIP telephones that are
directly connected to Session Manager.
NRP Trusted SIP Entity: If this option is
selected, SIP Firewall rule is matched
against the incoming SIP traffic from
entities that are marked as Trusted SIP
Entity in the Routing Policy.
Button Description
Cancel Cancels the defining of the rule
Commit Saves the defined rule and saves it when the
SIP firewall configuration is saved
Related topics:
Specifying a new SIP Firewall rule on page 382
Deep inspection filtering
SIP Firewall rules provide the following filters for deep inspection:
• SIP Layer content
• IP/Transport layer parameters such as IP address, protocol, port, and so on
You can combine both SIP Layer content and IP transport layer parameters in a single firewall
rule. For example, a SIP Firewall rule can limit the high rate of INVITE packets from a remote
IP address.
Denial of Service protection
SIP Firewall provides protection from the Denial of Service (DoS) attacks as follows:
• Flood Protection from a specified source
Advanced Flood Protection—A rule may be defined to detect/mitigate flood attacks within
the live SIP Stream without knowing the flood source in advance. In other words, the host
causing the flood need not be known when the rule is configured. A high performance
database tracks all matched messages.
Rate-Limiting—A “Rate Limit” action may be configured to limit the number of SIP packets
that are forwarded within a given period. Refer to the section Specifying a new SIP Firewall
rule for details on how to configure Rate Limit rules.
Rate-Blocking—A “Rate Block” action may be configured to completely block an offending
SIP source once the traffic reaches a specified threshold within a given period. Traffic is
Network Configuration
Administering Avaya Aura
®
Session Manager November 2010 389
Vista de pagina 388
1 2 ... 384 385 386 387 388 389 390 391 392 393 394 ... 531 532

Comentarios a estos manuales

Sin comentarios