Security Settings; Static Defense; Table 13: Ucm6100 FirewallStatic DefenseCurrent Service - Grandstream Networks UCM6100 Series User Manual

Security Settings

The UCM6100 provides users firewall configurations to prevent certain malicious attack to the UCM6100
system. Users could configure to allow, restrict or reject specific traffic through the device for security and
bandwidth purpose. The UCM6100 also provides Fail2ban feature for authentication errors in SIP
REGISTER, INVITE and SUBSCRIBE. To configure firewall settings in the UCM6100, go to Web
GUISystem SettingsSecurity Settings page.

Static Defense

Under Web GUISystem SettingsSecurity SettingsStatic Defense page, users will see the
following information:
•
Current service information with port, process and type.
•
Typical firewall settings.
•
Custom firewall settings.
The following table shows a sample current service status running on the UCM6100.
Port Process
7777 Asterisk
389 Slapd
22 Dropbear
80 Lighthttpd
8089 Lighthttpd
69 Opentftpd
9090 Asterisk
6060 zero_config
5060 Asterisk
4569 Asterisk
5353 zero_config
37435 Syslogd
For typical firewall settings, users could configure the following options on the UCM6100.
Table 13: UCM6100 FirewallStatic DefenseCurrent Service
Type
TCP/IPv4
TCP/IPv4
TCP/IPv4
TCP/IPv4
TCP/IPv4
UDP/IPv4
UDP/IPv4
UDP/IPv4
UDP/IPv4
UDP/IPv4
UDP/IPv4
UDP/IPv4
UCM6100 Series User Manual
Protocol or Service
SIP
LDAP
SSH
HTTP
HTTPS
TFTP
SIP
UCM6100 zero_config service
SIP
SIP
UCM6100 zero_config service
Syslog
P a g e 68
|