87
Security
Gigaset T300 PRO / Gigaset T500 PRO / englisch / A31008-M2212-R102-3-7619 / admin_administration.fm / 19.03.2012
V
e
rsion 2, 06.0
8
.2010
Password checking
Regularly check passwords: If active, all SIP passwords are checked immediately after
saving the setting, and then at the interval set below. If the check results in one or more
passwords not corresponding to the security guidelines, the first Administrator20
receives an eMail with a list of the affected phone accounts.
Automatic password update
Change insecure passwords automatically: This affects phones with existing access data,
which contact the PBX with an autoprovisioning request. If this option is activated and
the phone or SIP account password does not correspond to the security guideline, the
PBX automatically assigns a new and secure password when the phone makes the next
autoprovisioning request.
Call screening
The PBX operates an automatic background service to detect network attacks using SIP
requests. Attackers may try to gain access to a PBX phone account using a large number
of requests (brute force attacks). The filter service detects these attack attempts and
prevents them.
Automatic addition to blacklist and whitelist
With this, requests from attacking IP addresses are blocked and ignored for 24 hours. SIP
registrations via these IPs are no longer possible in this case. At the same time, the IP
addresses of the registered phones are included in the whitelist, whereby they are excluded
from the checks for 24 hours. The validity period for list entries of 24 hours is renewed each
time there is a registration request. However, it can also be amended for every IP address.
¤
To do this, click on the editing symbol
H
for the required entry.
Please note
This setting works independently from the manual assignment of weaker passwords
(if permitted) and regular password checking