Phone Proxy Audio Issues

[Matthew]

I originally setup my phone proxy using this guide:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/unified_comm_tlsproxy.html

Phone would register but there was no audio. Along with allowing tftp to CM I also added the following ports and it worked but I feel this should be unnecessary:

object-group service phone_proxy
 service-object tcp destination eq 2443
 service-object tcp destination eq 3804
 service-object tcp destination eq 5061
 service-object udp destination range 1024 65535
 service-object udp destination eq tftp

These were found in the following documentation:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/unified_comm_phoneproxy.html#pgfId-1238658

By the sounds of it these should only be needed if I had a firewall in between my ASA which is running the proxy.

Any ideas on what I may have missed or does this look right?

[Srinath R]

Hi Matthew,

You are correct. ASA does not need those ACLs when phone proxy is configured. Those are only required if there is another ASA in between the phone and PP-ASA.

Could you please share the complete config from the ASA?

Regards,

Srinath

[Matthew]

I am unable to post my entire config but the proxy related configuration is attached minus cert info.

[Matthew]

Could you also tell me if the "proxy url" on the phone should be set to the NAT'd CM address or MTA set up on the firewall?