User's Manual
13. Security
Version 6.8
151
Mediant 500 E-SBC
13.3.3 Assigning IDS Policies
The IDS Match table lets you implement your configured IDS Policies. You do this by
assigning specific IDS Policies to any, or a combination of, the following configuration
entities:
SIP Interface:
For detection of malicious attacks on specific SIP Interface(s). For
configuring SIP Interfaces, see ''Configuring SIP Interfaces'' on page
Proxy Sets:
For detection of malicious attacks from specified Proxy Set(s). For
configuring Proxy Sets, see ''Configuring Proxy Sets'' on page
Subnet addresses:
For detection of malicious attacks from specified subnet
addresses.
You can configure up to 20 IDS Policy-Matching rules.
To configure an IDS Policy-Matching rule:
1.
Open the IDS Match Table page (
Configuration
tab >
VoIP
menu >
Security
>
Intrusion Detection and Prevention
>
Match Table
).
2.
Click
Add
; the following dialog box appears:
Figure
13-7: IDS Match Table - Add Record
The figure above shows a configuration example where the IDS Policy "SIP Trunk" is
applied to SIP Interfaces 1 and 2, and all source IP addresses outside of subnet
10.1.0.0/16 and IP address 10.2.2.2.
3.
Configure a rule according to the parameters described in the table below.
4.
Click
Submit
, and then save ("burn") your settings to flash memory.
Table
13-5: IDS Match Table Parameter Descriptions
Parameter
Description
Index
[IDSMatch_Index]
Defines an index number for the new table record.
SIP Interface ID
CLI: sip-interface
[IDSMatch_SIPInterface]
Defines the SIP Interface(s) to which you want to assign the IDS
Policy. This indicates the SIP Interfaces that are being attacked.
The valid value is the ID of the SIP Interface. The following syntax is
supported:
A comma-separated list of SIP Interface IDs (e.g., 1,3,4)
A hyphen "-" indicates a range of SIP Interfaces (e.g., 3,4-7 means
IDs 3, and 4 through 7)
A prefix of an exclamation mark "!" means negation of the set (e.g.,
!3,4-7 means all indexes excluding 3, and excluding 4 through 7)
Содержание Mediant 500 E-SBC
Страница 2: ......
Страница 16: ...User s Manual 16 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 22: ...User s Manual 22 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 23: ...Part I Getting Started with Initial Connectivity...
Страница 24: ......
Страница 26: ...User s Manual 26 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 28: ...User s Manual 28 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 33: ...Part II Management Tools...
Страница 34: ......
Страница 36: ...User s Manual 36 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 64: ...User s Manual 64 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 82: ...User s Manual 82 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 89: ...Part III General System Settings...
Страница 90: ......
Страница 106: ...User s Manual 106 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 107: ...Part IV General VoIP Configuration...
Страница 108: ......
Страница 238: ...User s Manual 238 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 250: ...User s Manual 250 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 280: ...User s Manual 280 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 329: ...Part V Gateway Application...
Страница 330: ......
Страница 332: ...User s Manual 332 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 352: ...User s Manual 352 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 412: ...User s Manual 412 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 441: ...Part VI Session Border Controller Application...
Страница 442: ......
Страница 489: ...User s Manual 28 SBC Configuration Version 6 8 489 Mediant 500 E SBC...
Страница 510: ...User s Manual 510 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 511: ...Part VII Cloud Resilience Package...
Страница 512: ......
Страница 521: ...Part VIII High Availability System...
Страница 522: ......
Страница 536: ...User s Manual 536 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 537: ...Part IX Maintenance...
Страница 538: ......
Страница 544: ...User s Manual 544 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 546: ...User s Manual 546 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 548: ...User s Manual 548 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 582: ...User s Manual 582 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 600: ...User s Manual 600 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 602: ...User s Manual 602 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 603: ...Part X Status Performance Monitoring and Reporting...
Страница 604: ......
Страница 654: ...User s Manual 654 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 655: ...Part XI Diagnostics...
Страница 656: ......
Страница 672: ...User s Manual 672 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 687: ...Part XII Appendix...
Страница 688: ......
Страница 914: ...User s Manual 914 Document LTRT 10437 Mediant 500 E SBC This page is intentionally left blank...
Страница 919: ...User s Manual 56 Technical Specifications Version 6 8 919 Mediant 500 E SBC This page is intentionally left blank...
Страница 920: ...User s Manual Ver 6 8 www audiocodes com...