topic Re: Cisco ASA Sip inspection in Network Security

Cisco ASA Sip inspection

lsanchez — Tue, 12 Mar 2019 14:03:23 GMT

Good day,

I would like to ask how to verify if the sip inspection is enabled? And how to disable it ?

Thank you

Re: Cisco ASA Sip inspection

Marvin Rhoads — Tue, 30 Oct 2018 07:48:20 GMT

If it is an ASA running ASA software, SIP inspection is normally enabled by default under the global policy. You can see it here:

asa-5512# sh run policy-map global_policy
!
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map 
  inspect ftp 
  inspect h323 h225 
  inspect h323 ras 
  inspect rsh 
  inspect rtsp 
  inspect sqlnet 
  inspect skinny  
  inspect sunrpc 
  inspect xdmcp 
  inspect sip  
  inspect netbios 
  inspect tftp 
  inspect ip-options 
  inspect icmp 
  inspect pptp 
 class global-class
  flow-export event-type all destination 192.168.107.223
 class class-default
  user-statistics accounting
  set connection decrement-ttl

To disable it, you can run "no fixup protocol sip" from config mode.

Re: Cisco ASA Sip inspection

lsanchez — Tue, 30 Oct 2018 06:06:58 GMT

Hi sir Marvin,

Good day.

I'm able to disable it using ASDM, and it's working. Using CLI i haven't tried it. Thank you for you response, Very much appreciated.

Re: Cisco ASA Sip inspection

Marvin Rhoads — Tue, 30 Oct 2018 07:48:57 GMT

You're welcome.

Please mark your question as solved if it has been.