Table 14: Ucm6200 Firewall->Static Defense->Current Service; Table 15: Typical Firewall Settings - Grandstream Networks UCM6202 User Manual

Port Process
7777 Asterisk
389 Slapd
2000 Asterisk
22 Dropbear
80 Lighthttpd
8089 Lighthttpd
69 Opentftpd
9090 Asterisk
6060 zero_config
5060 Asterisk
4569 Asterisk
5353 zero_config
37435 Syslogd
For typical firewall settings, users could configure the following options on the UCM6200.
If enabled, ICMP response will not be allowed for Ping request. The default
Ping Defense
setting is disabled. To enable or disable it, click on the check box for the LAN or
Enable
WAN (UCM6200) interface.
Enable to prevent Ping-of-Death attack to the device. The default setting is
Ping-of-Death
disabled. To enable or disable it, click on the check box for the LAN or WAN
Defense Enable
(UCM6200) interface.
Under "Custom Firewall Settings", users could create new rules to accept, reject or drop certain traffic going
through the UCM6200. To create new rule, click on "Create New Rule" button and a new window will pop
up for users to specify rule options.
Right next to "Create New Rule" button, there is a checkbox for option "Reject Rules". If it's checked, all the
rules will be rejected except the firewall rules listed below. In the firewall rules, only when there is a rule that
meets all the following requirements, the option "Reject Rules" will be allowed to check:

Action: "Accept"

Type "In"

Destination port is set to the system login port (e.g., by default 8089)

Protocol is not UDP
Table 14: UCM6200 Firewall->Static Defense->Current Service
Type
tcp/IPv4
tcp/IPv4
tcp/IPv4
tcp/IPv4
tcp/IPv4
tcp/IPv4
udp/IPv4
udp/IPv4
udp/IPv4
udp/IPv4
udp/IPv4
udp/IPv4
udp/IPv4

Table 15: Typical Firewall Settings

UMC6200 Series User Manual
Protocol or Service
SIP
LDAP
SCCP
SSH
HTTP
HTTPS
TFTP
SIP
UCM6200 zero_config service
SIP
SIP
UCM6200 zero_config service
Syslog
P a g e | 60