Proxy Phone No Longer Registering

[mmedwid]

One of my folks moved to a new location and purchased a Cisco Linksys 1200 router to work with ISP CableVision.  The strange thing is that the proxy phone now fails to register.  One clue I have is a barrage of 2443 traffic constantly against my ASA.  Anyone care to hazard a guess what's going on??

           12/28/2013 5:18:17 AM          c5510-1.tmpc.local          Warning          Deny tcp src Outside:78.76.250.78/51055 dst Inside:47.56.154.60/2443 by access-group "Outside_access_in" [0x0, 0x0]

12/28/2013 5:18:16 AM          c5510-1.tmpc.local          Warning          Deny tcp src Outside:78.76.250.78/51055 dst Inside:47.56.154.60/2443 by access-group "Outside_access_in" [0x0, 0x0]

12/28/2013 5:17:32 AM          c5510-1.tmpc.local          Warning          Deny tcp src Outside:78.76.250.78/52388 dst Inside:47.56.154.60/2443 by access-group "Outside_access_in" [0x0, 0x0]

12/28/2013 5:17:24 AM          c5510-1.tmpc.local          Warning          Deny tcp src Outside:78.76.250.78/52388 dst Inside:47.56.154.60/2443 by access-group "Outside_access_in" [0x0, 0x0]

[Carlo Poggiarelli]

Hi.

Did you enabled TLS on SIP phone?

Is TLS required by TSP provider? If not please disable it or if necessary, allow that traffic on your ASA

Port 2443 is used by TLS

Please Let me know

Regards

Carlo

Please rate all helpful posts

"The more you help the more you learn"

[Joseph Martini]

Traffic from the remote phone on port 2443 is expected, that is the secure SCCP port used by the phone to connect to the ASA phone proxy securely over the Internet.  Has the phone upgraded it's firmware recently that you know of?  The ASA phone proxy does not understand newer SCCP versions so if the phone has upgraded it's firmware it may not be compatible with the ASA phone proxy anymore.  The new solution to avoid SCCP version comparability issues is the VPN client that can run directly on the phone and connect to the VPN head end so that SCCP traffic does not have to be inspected and fixed up.

If you have other phones registered using the phone proxy can you compare the firmware version and also double check that the working phones are also SCCP phones and are connected to the ASA using port 2443/TCP?