I've been scrolling through our syslog server and recently noticed that the following is happening on one of our isolated guest network firewalls recently:
Jan 14 09:04:01 FW2 : %ASA-6-607001: Pre-allocate SIP SIGNALLING UDP secondary channel for guest:192.168.108.158/5060 to outside:69.252.221.99 from 4xx message
Jan 14 09:04:01 FW2 : %ASA-6-607001: Pre-allocate SIP Via UDP secondary channel for guest:192.168.108.158/5060 to outside:69.241.17.107 from OPTIONS message
Now I'm assuming that this is someone on our guest network trying to set up a communication channel to the remote locations. This only appears to be happening from the inside to the outside, so my question is should I be concerned or is this something we can ignore?
Throwing packets since 2012
