Example: Configuring SIP ALG DoS Attack Protection (CLI)
In this example, you configure the device to protect a single SIP proxy server (1.1.1.3) from repeat INVITE requests to which it has already denied service. Packets are dropped for a period of 5 seconds, after which the device resumes forwarding INVITE requests from those sources.
To configure DoS attack protection:
user@host# set security alg sip application-screen protect
deny destination-ip 1.1.1.3user@host# set security alg sip application-screen protect
deny timeout 5
Related Topics
- JUNOS Software Feature Support Reference for SRX Series and J Series Devices
- Understanding SIP ALG DoS Attack Protection
- SIP ALG Configuration Overview
- Example: Configuring SIP ALG DoS Attack Protection (J-Web)
- Verifying SIP ALG Configurations