VCSe -> DNSZone "Denied by policy"

[thorstenn]

Hi,

i have a CUCM -> VCS-C/VCS-e deployment and incoming calls working fine. But outgoing calls not working. I see the following in search history:

• • SubSearch (1)
  • • Type: Search Rules
  • • SearchRule (1)
    • • Name: DNS zone search rule
    • • Zone (1)
      • • Name: DNSZone
      • • Type: DNS
      • • Protocol: SIP
      • • Found: False
      • • Reason: Denied by policy
      • • StartTime: 2013-08-29 17:00:32
      • • Duration: 0.1
      • • Gatekeeper (1)
        • • Alias (1)
          • • Type: H323Id
          • • Origin: Unknown
          • • Value: video@otherdomain.com

I have disabled Local CPL. What could be wrong?

[Paulo Souza]

Hi,

I think you have configured the parameter "source" in the search rule configuration, may be you have set it to "Local Zone". Or the parameter "request must to be authenticated" may be enable. Can you check your search rule "DNS zone search rule"??

There are good reasons for using those parameters, if you have configured them, let us know, because I really dont suggest you to simply disable them.

Regards

Paulo Souza

Please rate replies and mark question as "answered" if applicable.

[thorstenn]

Hi,

just for info. The problem was a CPL on the other side.

Regards

Thorsten

[ahmashar]

Hi,

that's right, Denied policy it's admin policy configuration and mainly configured through CPL script.

BR, Ahmad

[dortewillemann911]

Hellu  Thorsten,

    Name: DNS zone search rule

    Zone (1)

        Name: DNSZone

        Type: DNS

        Protocol: SIP

        Found: False

        Reason: Denied by policy

Either a script or xternal pulicy server is blucking a call.

@Thorsten

whn u say that prublemo was cpl on utherside, did u picked this search history from expressway.

and CPL on cucm side was the issue? i am assuming your endpoints were registered to VCSc/e and 

far end is the CUCM.

I thank you ..

Dorte..

[thorstenn]

Hi Dorte,

both sides have VCSc/e and endpoints registered on CUCM. I have controll of both sides so i was looking on both sides search history and as on far end side i saw also "Denied by policy" it was clear to me i forgot to add the new domain to CPL script on VCSe.

Regards

Thorsten