Grandstream Networks UCM6200 Series, User Manual

Page: 77 / 469

P a g e | 76
UCM6200 Series User Manual
Version 1.0.20.38
Security Settings
The UCM offers several methods of protection against malicious attacks and unauthorized access such as
firewall rules, connection thresholds, and Fail2ban.
To get started on configuring security settings, navigate to the
System Settings->Security Settings page.
Static Defense
On the Static Defense page, users can configure firewall rules and view the ports used by various UCM
services and processes.
The following table shows a few examples of the information available on the Static Defense page.
Table 12: UCM6200 Firewall → Static Defense → Current Service
Port Process Type Protocol or Service
7777 Asterisk TCP/IPv4 SIP
389 Slapd TCP/IPv4 LDAP
2000 Asterisk TCP/IPv4 SCCP
22 Dropbear TCP/IPv4 SSH
80 Lighthttpd TCP/IPv4 HTTP
8089 Lighthttpd TCP/IPv4 HTTPS
69 Opentftpd UDP/IPv4 TFTP
9090 Asterisk UDP/IPv4 SIP
6060 zero_config UDP/IPv4 UCM6200 zero_config service
5060 Asterisk UDP/IPv4 SIP
4569 Asterisk UDP/IPv4 SIP
5353 zero_config UDP/IPv4 UCM6200 zero_config service
37435 Syslogd UDP/IPv4 Syslog
For general firewall defense mechanisms, UCM supports Ping Defense, SYN-Flood Defense, and Ping-of-
Death Defense. These can be configured separately for the WAN interface and LAN interface.
Table 13: Typical Firewall Settings
Ping Defense
Enable
If enabled, the UCM will not send ICMP messages in response to ping requests.