cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
275
Views
10
Helpful
4
Replies
Highlighted
Beginner

Call failure after installing ASA firewall.


Hello
Currently, an ASA firewall is installed in front of the H.323 Gateway.

After installing the firewall, calls cannot be made during a call. All firewall policies are allowed.

When talking on the phone, it is disconnected after a few seconds without ring back tone.

If you remove the ASA firewall, the call will proceed normally.

The configuration diagram was uploaded as an attachment.

Thank you

4 REPLIES 4
Highlighted
VIP Advisor

>From ASA, global policy inspection, disable h323 h225 and h323 h245
inspection. Also disable sip inspection if you are using sip.

**** please remember to rate useful posts
Highlighted
VIP Rising star

Hello,

What Mohammed describes above is a must for testing the performance of your system with the ASA, you can find an example/reference of disabling SIP inspection below:

https://community.cisco.com/t5/network-security/cisco-asa-sip-inspection/m-p/3734878

George

Please Rate Posts (by clicking on Star) and/or Mark Solutions as Accepted, when applies
Highlighted

Thank you for answer.
However, the global policy policy is set by default, but if you disable it, I wonder if there is any problem with the service.

And policy-map global_policy is h323 matched in Class-map like the attached file, so if you disable inspect h323, you think h323 communication is not correct, right?

Thank you

 

Highlighted

Hi,

The communication will continue to work. Disabling h323 won't cause a
problem.

**** please remember to rate useful posts