CallManager Security / Potential DoS?

[akoerni]

Hi there,

I am wondering how the CallManager 3.3(3)+ reacts when getting a large number of JTAPI requests (such as change call forwarding etc.). Is it vulnerable to JTAPI-Denial of Service attacks? Does it block requests?

[murabi]

I think you have to have a firewwall. I exactly dont know whether it will drop if it receieves too many requests.

[8r-schumann]

Call Manager will look at the request before 'processing' it to see if the request is from a valid gateway or endpoint. If it is not a vaild endpoint then it drops the request.

So the DOS would just be a CPU overload not a DOS on the CCM system. The question is how much requests would cause the CCM to crash if anyone has IPCC then they now how much information can go through those JTAPI ports at a time without degrading the service.