An organization wishes to protect its SIP Server from call flooding attacks. Which of the following configuration changes can be performed on the FortiGate unit to fulfill this requirement?

Question

Accepted Answer

A. Apply an application control list which contains a rule for SIP and has the "Limit INVITE Request" FortiGate's Application Control profiles can inspect specific application-layer protocols like SIP. Within a SIP application control rule, the 'Limit INVITE Request' option is designed to mitigate SIP call flooding attacks by rate-limiting the number of SIP INVITE messages, thus preventing the SIP server from being overwhelmed.

Answer

B. Enable Traffic Shaping for the appropriate SIP firewall policy. Enabling Traffic Shaping manages bandwidth and priority but does not directly prevent or detect application-layer call flooding attacks; it shapes existing traffic flows.

Answer

C. Reduce the session time-to-live value for the SIP protocol by running the configure system Reducing the session time-to-live value for SIP primarily affects how long inactive sessions persist, which does not directly prevent a flood of new connection attempts.

Answer

D. Run the set udp-idle-timer CLI command and set a lower time value. The `set udp-idle-timer` CLI command controls the timeout for inactive UDP sessions and does not provide protection against high rates of new SIP INVITE requests.

An organization wishes to protect its SIP Server from call flooding attacks. Which of the following configuration changes can be performed on the FortiGate unit to fulfill this requirement?

Question

Options

How the community answered

Why each option

Topics

Community Discussion