Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

UC320W Firewall - Blocking an IP

We have an intrusive behavior taking place at one client's location.

Many hits to 3389 (RDP) in an attempt to bruteforce a password probably.

Is there any way to block traffic from an IP or range of IPs on the UC320W without reconfiguring and putting an actual firewall on location?

During a support case for another client, a Cisco engineer was in the advanced configuration and there were many options available, but not in the "dumbed down" version we get to see normally.

Any help is appreciated!

John

Everyone's tags (3)
2 REPLIES
Cisco Employee

UC320W Firewall - Blocking an IP

John,

There are a few additional security options in the advanced pages but there is not a way to block a specfic IP address or range tied to a specific port.  By default the SPI firewall protection is enabled on the UC320W.

Do you have port forwarding enebled to a target IP address for RDP?

Randy

Community Member

UC320W Firewall - Blocking an IP

The client in question has port 3389 forwarded to their primary terminal server, correct.

I guess the only solutions are to put an actual firewall on location in front of the UC320W, or configure Windows to block that traffic.  ugh

Sure would be nice to add a DENY FROM option... 

Thank you,

John

606
Views
0
Helpful
2
Replies
CreatePlease to create content