Example: Configuring SIP ALG DoS Attack Protection (CLI)

In this example, you configure the device to protect a single SIP proxy server (1.1.1.3) from repeat INVITE requests to which it has already denied service. Packets are dropped for a period of 5 seconds, after which the device resumes forwarding INVITE requests from those sources.

To configure DoS attack protection:

user@host# set security alg sip application-screen protect deny destination-ip 1.1.1.3user@host# set security alg sip application-screen protect deny timeout 5

Related Topics