Cisco ASA Sip inspection

[lsanchez]

Good day,

I would like to ask how to verify if the sip inspection is enabled? And how to disable it ?

Thank you

[Marvin Rhoads]

If it is an ASA running ASA software, SIP inspection is normally enabled by default under the global policy. You can see it here:

asa-5512# sh run policy-map global_policy
!
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map 
  inspect ftp 
  inspect h323 h225 
  inspect h323 ras 
  inspect rsh 
  inspect rtsp 
  inspect sqlnet 
  inspect skinny  
  inspect sunrpc 
  inspect xdmcp 
  inspect sip  
  inspect netbios 
  inspect tftp 
  inspect ip-options 
  inspect icmp 
  inspect pptp 
 class global-class
  flow-export event-type all destination 192.168.107.223
 class class-default
  user-statistics accounting
  set connection decrement-ttl

To disable it, you can run "no fixup protocol sip" from config mode. 

[lsanchez]

Hi sir Marvin,

Good day.

I'm able to disable it using ASDM, and it's working. Using CLI i haven't tried it. Thank you for you response, Very much appreciated. 

[Marvin Rhoads · Accepted solution]

You're welcome.

Please mark your question as solved if it has been.