ASA as a SIP ALG?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-30-2014 09:30 AM - edited 03-11-2019 09:33 PM
Guys,
Struggling with ASA and SIP.
SIP inspection is enabled, and I have some NATs configured for a public Internet SIP service.
Inbound/outbound calls connect, but we are having 1-way audio (private to public ok, public to private nok)
This is because the SIP INVITE SDP header is using the private IP address of the handset, and the ASA is not rewriting it to the required outside public IP address.
What am I missing to get the ALG part of SIP inspection working?
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-30-2014 04:38 PM
Hey,
You ain't missing something, that's the whole purpose of the SIP inspection ALG, make sure that value inside the SIP payload get's translated properly.
If that is not taking place then you got to be hitting a bug.
Regards,
Jcarvaja
CCIE 42930, 2xCCNP, JNCIS-SEC
For inmediate support http://iNetworks.cr
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
