Can rapid fire spam phone calls be blocked by the PA

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Can rapid fire spam phone calls be blocked by the PA

L4 Transporter

Can rapid fire spam phone calls be blocked by the PA, they seem to be similar to a dial of service and they are making it possible for us to make outgoing calls or recieve incoming calls by using all our phone sessions? Is there a way to block them using the PA?

10 REPLIES 10

Cyber Elite
Cyber Elite

@jdprovine,

This would be better to control at your gateway/SBC instead of the firewall. 

SBC is a session border controller, one other person mentioned it and this is the first time I have ever hear of it. It is specifically for phone systems?

@jdprovine 

Yes, an SBC is generally setup for VoIP and a PBX would generally be either deployed alongside a gateway or act as its own gateway. Whether or not you have one would be dependent on what you are using as a phone system.

We have cisco IP phones, I would think it would be helpful to keep us from getting attacked so to speak

@BPry 

I am new to phones but I believe we do have a SBC - cisco cube, so I am wondering if the configuration is set way to broad and accepts way too much?

@jdprovine,

I'm not all that fimiliar with Cube, but I would assume that it would have a similar featureset as an Expressway and CUCM whcih would make this possible. 

You might want to verify that whoever setup your equipment has SIP UDP disabled so that toll fraud isn't chewing into your licenses. Look into whether or not Cube can do a CPL rule. 

@BPry 

I am totally new to Cube and phones in general,LOL I don't even know what expressway is. thanks for the suggestions I will check into it, 

It's 5 years since I have managed a Cisco UCM, but your definatly going to have more success there than tryign anythig on the PA.

 

But if your on a SIP trunk, then speak to your phone system provider.

 

Rob

@RobinClayton 

And yes we are on a SIP trunk. When you say phone system provider do you mean cisco or the ISP that provides for our external lines?

I would start with The ISP that provides the SIP trunk. At least ask them the question as they probably will be able to give you a yes or no in seconds.

 

As with most things it's better to block as close to the source as possible, if you try to do the blocking the "Session Initiation" is still trying to take place and impacting your PBX, Firewall, SIPtrunk and Internet. You may go from lots of nuicance calls to a saturation of Initiations.

 

The SIP/ISP provider should be able to limit the rate of new calls.

 

But a quick hunt arround sugests CUBE has a feature that may help.

"call spike"

 

 

  • 7744 Views
  • 10 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!