topic Allow SIP on multiple ports, not only 5060 (ASA 5505) in Network Security https://community.cisco.com/t5/network-security/allow-sip-on-multiple-ports-not-only-5060-asa-5505/m-p/1940039#M436849 <P>We've read everything about inspecting SIP packets and allowing them to pass through on port 5060, the default SIP port. However, our setup requires the ASA 5505 to allow SIP on ports 5060, 5160 and 5260.</P><P></P><P>Is this possible with the ASA 5505?</P><P></P><P>If it's not, it would be a blocking issue for us to move forward with ASA appliances. We are currently investigating in a lab environment and really having difficulties configuring it to facilitate full SIP functionality.</P><P></P><P>Additional information that our provider gave us is that we would have to allow</P><P></P><UL><LI>Port: 5060 / UDP (SIP)</LI><LI>Port: 5004 / UDP (RTP)</LI><LI>Port: 3478 UDP (STUN) </LI></UL><P></P><P>Any help is greatly appreciated.</P><P></P><P>Best,</P><P>-Ralf</P> Mon, 11 Mar 2019 23:07:24 GMT ralf.rottmann 2019-03-11T23:07:24Z Allow SIP on multiple ports, not only 5060 (ASA 5505) https://community.cisco.com/t5/network-security/allow-sip-on-multiple-ports-not-only-5060-asa-5505/m-p/1940039#M436849 <P>We've read everything about inspecting SIP packets and allowing them to pass through on port 5060, the default SIP port. However, our setup requires the ASA 5505 to allow SIP on ports 5060, 5160 and 5260.</P><P></P><P>Is this possible with the ASA 5505?</P><P></P><P>If it's not, it would be a blocking issue for us to move forward with ASA appliances. We are currently investigating in a lab environment and really having difficulties configuring it to facilitate full SIP functionality.</P><P></P><P>Additional information that our provider gave us is that we would have to allow</P><P></P><UL><LI>Port: 5060 / UDP (SIP)</LI><LI>Port: 5004 / UDP (RTP)</LI><LI>Port: 3478 UDP (STUN) </LI></UL><P></P><P>Any help is greatly appreciated.</P><P></P><P>Best,</P><P>-Ralf</P> Mon, 11 Mar 2019 23:07:24 GMT https://community.cisco.com/t5/network-security/allow-sip-on-multiple-ports-not-only-5060-asa-5505/m-p/1940039#M436849 ralf.rottmann 2019-03-11T23:07:24Z Allow SIP on multiple ports, not only 5060 (ASA 5505) https://community.cisco.com/t5/network-security/allow-sip-on-multiple-ports-not-only-5060-asa-5505/m-p/1940040#M436850 <HTML><HEAD></HEAD><BODY><P>Hello Ralf,</P><P></P><P>The ASA does not have any inspection available for the STUN protocol, it does have one for the SIP traffic, so my recomendation would be to inspect the SIP protocol and open on an ACL port 5004 and port 3478. RTP sessions will be open dynamically from the SIP inspection. </P><P></P><P>Regards,</P><P></P><P>Julio</P></BODY></HTML> Tue, 15 May 2012 16:27:53 GMT https://community.cisco.com/t5/network-security/allow-sip-on-multiple-ports-not-only-5060-asa-5505/m-p/1940040#M436850 Julio Carvajal 2012-05-15T16:27:53Z