topic Could you also tell me if the in Network Security

Phone Proxy Audio Issues

Matthew — Tue, 12 Mar 2019 05:09:04 GMT

I originally setup my phone proxy using this guide:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/unified_comm_tlsproxy.html

Phone would register but there was no audio. Along with allowing tftp to CM I also added the following ports and it worked but I feel this should be unnecessary:

object-group service phone_proxy
service-object tcp destination eq 2443
service-object tcp destination eq 3804
service-object tcp destination eq 5061
service-object udp destination range 1024 65535
service-object udp destination eq tftp

These were found in the following documentation:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/unified_comm_phoneproxy.html#pgfId-1238658

By the sounds of it these should only be needed if I had a firewall in between my ASA which is running the proxy.

Any ideas on what I may have missed or does this look right?

Hi Matthew, You are correct.

Srinath R — Fri, 28 Nov 2014 07:24:35 GMT

Hi Matthew,

You are correct. ASA does not need those ACLs when phone proxy is configured. Those are only required if there is another ASA in between the phone and PP-ASA.

Could you please share the complete config from the ASA?

Regards,

Srinath

I am unable to post my entire

Matthew — Fri, 28 Nov 2014 21:02:14 GMT

I am unable to post my entire config but the proxy related configuration is attached minus cert info.

Could you also tell me if the

Matthew — Sun, 30 Nov 2014 22:04:16 GMT

Could you also tell me if the "proxy url" on the phone should be set to the NAT'd CM address or MTA set up on the firewall?