cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Walkthrough Wednesdays
342
Views
10
Helpful
4
Replies
Yun Ho Ko
Beginner

Call failure after installing ASA firewall.


Hello
Currently, an ASA firewall is installed in front of the H.323 Gateway.

After installing the firewall, calls cannot be made during a call. All firewall policies are allowed.

When talking on the phone, it is disconnected after a few seconds without ring back tone.

If you remove the ASA firewall, the call will proceed normally.

The configuration diagram was uploaded as an attachment.

Thank you

4 REPLIES 4
Mohammed al Baqari
VIP Advisor

>From ASA, global policy inspection, disable h323 h225 and h323 h245
inspection. Also disable sip inspection if you are using sip.

**** please remember to rate useful posts
George Sotiropoulos
VIP Collaborator

Hello,

What Mohammed describes above is a must for testing the performance of your system with the ASA, you can find an example/reference of disabling SIP inspection below:

https://community.cisco.com/t5/network-security/cisco-asa-sip-inspection/m-p/3734878

George

Please Rate Posts (by clicking on Star) and/or Mark Solutions as Accepted, when applies

Thank you for answer.
However, the global policy policy is set by default, but if you disable it, I wonder if there is any problem with the service.

And policy-map global_policy is h323 matched in Class-map like the attached file, so if you disable inspect h323, you think h323 communication is not correct, right?

Thank you

 

Hi,

The communication will continue to work. Disabling h323 won't cause a
problem.

**** please remember to rate useful posts
Content for Community-Ad

Spotlight Awards 2021