cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3829
Views
0
Helpful
3
Replies

Cisco ASA Sip inspection

lsanchez
Beginner
Beginner

Good day,

 

I would like to ask how to verify if the sip inspection is enabled? And how to disable it ?

 

Thank you

1 Accepted Solution

Accepted Solutions

Marvin Rhoads
VIP Community Legend VIP Community Legend
VIP Community Legend

You're welcome.

 

Please mark your question as solved if it has been.

View solution in original post

3 Replies 3

Marvin Rhoads
VIP Community Legend VIP Community Legend
VIP Community Legend

If it is an ASA running ASA software, SIP inspection is normally enabled by default under the global policy. You can see it here:

 

asa-5512# sh run policy-map global_policy
!
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map 
  inspect ftp 
  inspect h323 h225 
  inspect h323 ras 
  inspect rsh 
  inspect rtsp 
  inspect sqlnet 
  inspect skinny  
  inspect sunrpc 
  inspect xdmcp 
  inspect sip  
  inspect netbios 
  inspect tftp 
  inspect ip-options 
  inspect icmp 
  inspect pptp 
 class global-class
  flow-export event-type all destination 192.168.107.223
 class class-default
  user-statistics accounting
  set connection decrement-ttl

To disable it, you can run "no fixup protocol sip" from config mode. 

Hi sir Marvin,

 

Good day.

 

I'm able to disable it using ASDM, and it's working. Using CLI i haven't tried it. Thank you for you response, Very much appreciated. 

 

Marvin Rhoads
VIP Community Legend VIP Community Legend
VIP Community Legend

You're welcome.

 

Please mark your question as solved if it has been.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers