PIX 7 fixup tftp

[m.reay]

Has anyone configured PIX 7 to allow communication with Cisco Call Manager protected by the firewall.

The Cisco pdf titled "Cisco Callmanager 4.1 TCP and UDP port usage" states that between phones and Call Manager for TFTP - port 69 then ephemeral UDP ports need to be allowed.

Is the function of the INSPECT TFTP (previously FIXUP PROTOCOL TFTP) not to monitor for the required ports so that ephemeral ports dont have to be opened up?

Is this peculiar to Call Manager 4.1 as I have configured PIX with earlier versions and have not been required to open these ephemeral ports.

[thomas.chen]

Can you go through the following documents?. I think they have some useful points for your understanding.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_book09186a00805f7260.html

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_book09186a0080485008.html