Call failure after installing ASA firewall.

[Yun Ho Ko]

Hello
Currently, an ASA firewall is installed in front of the H.323 Gateway.

After installing the firewall, calls cannot be made during a call. All firewall policies are allowed.

When talking on the phone, it is disconnected after a few seconds without ring back tone.

If you remove the ASA firewall, the call will proceed normally.

The configuration diagram was uploaded as an attachment.

Thank you

[Mohammed al Baqari]

>From ASA, global policy inspection, disable h323 h225 and h323 h245
inspection. Also disable sip inspection if you are using sip.

**** please remember to rate useful posts

[George Sotiropoulos]

Hello,

What Mohammed describes above is a must for testing the performance of your system with the ASA, you can find an example/reference of disabling SIP inspection below:

https://community.cisco.com/t5/network-security/cisco-asa-sip-inspection/m-p/3734878

George

[Yun Ho Ko]

Thank you for answer.
However, the global policy policy is set by default, but if you disable it, I wonder if there is any problem with the service.

And policy-map global_policy is h323 matched in Class-map like the attached file, so if you disable inspect h323, you think h323 communication is not correct, right?

Thank you

[Mohammed al Baqari]

Hi,

The communication will continue to work. Disabling h323 won't cause a
problem.

**** please remember to rate useful posts