Configuring intrusion detection

Security > Intrusion Detection lets you manually add IPs to be exempted from being blocked and configure intrusion detection settings.

The manually added IPs are usually from the sources that you trust. For example, IPs from external customer devices can be added.

IPs of the devices that are registered to the FortiVoice unit are automatically added to the exempt list.

For information on viewing system added exempt IPs, see Blocking SIP device IPs.

To add an exempt IP

1. Go to Security > Intrusion Detection > Exempt IP.
2. Click New.
3. Enter the IP.
4. Click Create.

To configure intrusion detection settings

1. Go to Security > Intrusion Detection > Setting.
2. Configure the following:

   GUI field	Description
   Status	Disable: Select to stop the intrusion detection activities. Monitor Only: Select to only track the intrusion detection activities. Enable: Select to activate the intrusion detection activities.
   Access tracking	Select the method to track the traffic access (and IPs) to the FortiVoice unit.
   Initial block period	Enter the time in minutes to initially block every new device/IP trying to access the FortiVoice unit. This is to screen out spammers or attackers because they normally will not try again after being blocked initially.

3. Click Apply.