topic Re: H.323 sessions in Network Security https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358225#M721606 <HTML><HEAD></HEAD><BODY><P>Thanks PK,</P><P></P><P></P><P>Do you know if there exists a specific debug for H323, or the which is the most useful debug we should setup?</P><P></P><P></P><P>Thank you!</P></BODY></HTML> Mon, 01 Mar 2010 11:52:04 GMT lcuchisanmillan 2010-03-01T11:52:04Z H.323 sessions https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358223#M721604 <P>Hi:</P><P>We have a problem with H.323 sessions.. We have upgraded two Cisco ASA 5520 with 8.2(1) version. After this we have problem with H.323 sessions. The sessions are establish through Call Manager and communications works fine some minutes. Then the sessions are lost they don´t hold keep-alive.</P><P></P><P>Regards</P> Mon, 11 Mar 2019 17:13:40 GMT https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358223#M721604 lcuchisanmillan 2019-03-11T17:13:40Z Re: H.323 sessions https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358224#M721605 <HTML><HEAD></HEAD><BODY><P>You can check the ASA h323 logs and debugs when the session is torn down to try to identify the cause they are torn down.</P><P>Open a case with TAC for deeper investigation.</P><P></P><P>PK</P></BODY></HTML> Tue, 23 Feb 2010 22:32:54 GMT https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358224#M721605 Panos Kampanakis 2010-02-23T22:32:54Z Re: H.323 sessions https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358225#M721606 <HTML><HEAD></HEAD><BODY><P>Thanks PK,</P><P></P><P></P><P>Do you know if there exists a specific debug for H323, or the which is the most useful debug we should setup?</P><P></P><P></P><P>Thank you!</P></BODY></HTML> Mon, 01 Mar 2010 11:52:04 GMT https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358225#M721606 lcuchisanmillan 2010-03-01T11:52:04Z Re: H.323 sessions https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358226#M721608 <HTML><HEAD></HEAD><BODY><P>I would suggested "logging level debug" and "debug h323 h225 event" and "debug h323 h245 events"</P><P></P><P>I hope it sheds some light.</P><P></P><P>PK</P></BODY></HTML> Mon, 01 Mar 2010 14:07:22 GMT https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358226#M721608 Panos Kampanakis 2010-03-01T14:07:22Z Re: H.323 sessions https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358227#M721611 <HTML><HEAD></HEAD><BODY><P>Hi PK,</P><P></P><P></P><P>We haven't configured yet the h323 debug, but we did another test capturing simple logs from ASDM and we've setup a sniffer capture, and there we see TCP Keep Alive packets between Call Managers are getting lost when the conversation is mantained about 300 sec of duration, and finally the CM sends a RST packet.</P><P></P><P>Could be this a bug in the H323 inspection rule?</P><P></P><P></P><P></P><P>Regards,</P></BODY></HTML> Tue, 02 Mar 2010 10:07:52 GMT https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358227#M721611 lcuchisanmillan 2010-03-02T10:07:52Z Re: H.323 sessions https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358228#M721613 <HTML><HEAD></HEAD><BODY><P>If the ASA is dropping keepalives then it could be a defect.</P><P>I haven't seen something like that in 8.2.1 though.</P><P>"sh service-policy" will show you if the h323 inspection has any drops though.</P><P></P><P>I hope it helps.</P><P></P><P>PK</P></BODY></HTML> Tue, 02 Mar 2010 14:10:57 GMT https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358228#M721613 Panos Kampanakis 2010-03-02T14:10:57Z Re: H.323 sessions https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358229#M721617 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: large;"><STRONG><A href="http://cdetsweb-prd.cisco.com/apps/goto?identifier=CSCsy30717">http://cdetsweb-prd.cisco.com/apps/goto?identifier=CSCsy30717</A></STRONG></SPAN><A href="http://wwwin.cisco.com/ios/cets/pdi/cbms/cdets/legend.shtml" target="_blank" title="Help"><SPAN style="font-size: 8pt;"><BR /></SPAN></A></P><P>CSCsy30717&nbsp;&nbsp; <SPAN style="font-size: large;"><STRONG>Keepalive not processed correctly thru TCP Proxy</STRONG></SPAN></P><P></P><P><STRONG>Resolved in 8.2.1(10)</STRONG></P><P></P><PRE style="font-family: monospace; font-size: 12px; white-space: pre-wrap; word-wrap: break-word;"><B>Symptom:</B><BR />TCP Keep Alives between h323 endpoints are not processed correctly by the ASA.&nbsp; <BR /><BR /><B>Workaround:</B><BR />None<BR /><BR /></PRE><P></P><P><STRONG>-KS</STRONG></P></BODY></HTML> Tue, 02 Mar 2010 18:47:46 GMT https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358229#M721617 Kureli Sankar 2010-03-02T18:47:46Z Re: H.323 sessions https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358230#M721619 <HTML><HEAD></HEAD><BODY><P>Hi to all</P><P></P><P>Thank you! you're very kind! I'm going to download 8.2.1(10) an schedule an upgrade. If this solve the problem I'll notice that to all.</P><P></P><P></P><P>Cheers</P></BODY></HTML> Wed, 03 Mar 2010 09:29:35 GMT https://community.cisco.com/t5/network-security/h-323-sessions/m-p/1358230#M721619 lcuchisanmillan 2010-03-03T09:29:35Z