Traffic Type

The type of traffic.

Max Concurrent Sessions

Maximum number of concurrent sessions

Number of Remote Users

Number of remote users for the DoS profile

SIP Service

SIP service affected by the DoS attack. The options are:

• TOTAL

• Registrations

• Calls

• Presence Updates

• Subscriptions

• Misc

SIP Method

The SIP Methodfor the DoS profile. The options are:

• ALL

• REGISTER

• INVITE

• SUBSCRIBE

• PUBLISH

• OPTIONS

Initiated Threshold (per 10 seconds)

The maximum number of sessions that can be started within a 10 second period.

Pending Threshold

The maximum number of pending session initiations.

Failed Threshold (per 10 seconds)

Maximum number of failed session initiations.

Action

The action to be performed should any of the above thresholds be exceeded.

The options are :

• Alert Only: An alert that displays the DoS incident but the call is not blocked.

• Enforce Limit: The call is not blocked until the specified limit is reached.

• Enforce Limit Response: The call is blocked and the system sends the specified response when the specified limit is reached.

• SIP Challenge: Initiate Authentication

  Note:

  The SIP Challenge action should not be selected for a DoS profile configuration because Avayaphones do not respond the second time when they are again authenticated by Avaya after being challenged by Avaya SBC.

• Whitelist: If the call originator exists in the Whitelist, do not block the call.