cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
542
Views
10
Helpful
4
Replies

Call failure after installing ASA firewall.

Yun Ho Ko
Beginner
Beginner


Hello
Currently, an ASA firewall is installed in front of the H.323 Gateway.

After installing the firewall, calls cannot be made during a call. All firewall policies are allowed.

When talking on the phone, it is disconnected after a few seconds without ring back tone.

If you remove the ASA firewall, the call will proceed normally.

The configuration diagram was uploaded as an attachment.

Thank you

4 Replies 4

Mohammed al Baqari
VIP Advisor VIP Advisor
VIP Advisor
>From ASA, global policy inspection, disable h323 h225 and h323 h245
inspection. Also disable sip inspection if you are using sip.

**** please remember to rate useful posts

George Sotiropoulos
Cisco Employee
Cisco Employee

Hello,

What Mohammed describes above is a must for testing the performance of your system with the ASA, you can find an example/reference of disabling SIP inspection below:

https://community.cisco.com/t5/network-security/cisco-asa-sip-inspection/m-p/3734878

George

Please Rate Posts (by clicking on Star) and/or Mark Solutions as Accepted, when applies

Thank you for answer.
However, the global policy policy is set by default, but if you disable it, I wonder if there is any problem with the service.

And policy-map global_policy is h323 matched in Class-map like the attached file, so if you disable inspect h323, you think h323 communication is not correct, right?

Thank you

 

Hi,

The communication will continue to work. Disabling h323 won't cause a
problem.

**** please remember to rate useful posts
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: