Hello everyone! Thank you in advanced for reading! We have a NGFW with a sensor running version 6.2 that presents with a problem, seemingly at random. The FW, is configured to authenticate AD users using the CISCO Agent, installed on a server which has links to both our primary and backup controllers. All is working on the agent side, it has the correct mapping, ip address, refreshes as expected, etc. We've had instances where the user can NOT browse, the sensor shows an "unknown" user (although shows in the events as "allowed"), but the FW does not prompt for credentials to the client, nor refreshes or sees the mapping in question; internet explorer keeps spinning. However, by logging on as someone else, it starts working fine with that other users' credentials, without prompting; it just goes. How can this be tracked? How to know what the problem is, or where it resides? .... Changing IP addresses does not solve it, resetting the password of the original user with the problem does not solve it... I'm confused as to where to look and what can be causing this. Thank you and have a great day! ... View more

Hello Everyone! I am confused on a seemingly harmless error/warning I am getting on a router (ISR 4351) iOS XE 03.16.00.S.155-3.S-ext.SPA On incoming calls a "debug ccsip all" shows this: Apr 25 12:34:22.494: //214953/C83C664091E7/SIP/Media/sipSPI_ipip_GetContentSDPForPthru: Updated SDP from inbound  container:266 SIP: Warning: Unrecognized attribute (bsoft) SIP: Trying to parse unsupported attribute at media level SIP: Group (a= group line) attribute, level 65535 instance 1 not found. Apr 25 12:34:22.494: //214953/C83C664091E7/SIP/Info/verbose/1/sipSPIValidateConnectionAddress: Dest port = 52146 SIP: Attribute mid, level 1 instance 1 not found. Apr 25 12:34:22.494: //214953/C83C664091E7/SIP/Info/notify/6/sipSPIValidateStreamAddrType: stream:1, Mode : 1 Apr 25 12:34:22.494: //214953/C83C664091E7/SIP/Info/verbose/513/resolve_media_ip_address_to_bind: peer_tag=2201 I am unsure why this is happening or how can I resolve. I've tried a few things to no avail and just don't know enough about normalization or diversion headers to address this. I am just guessing it's where this can be fixed... ?? Please help! Thank you and have a great day! ... View more

Hello Everyone! ... and thank you in advanced! We have a strange problem in one location only. When we are downloading a big file or "stressing" our MPLS here; our voicemail attendant and actual voice mails begin to experience jitter, noise and some words are repeated... I am a bit at a loss as to where to look or how to fix this. I've tried policing the interface and seems to make it worse, checked the switch and reconfigured to CISCO recommended settings for IP phones (7945) Thank you for your help!! Have a great day!   ... View more

Hello! This is a very basic, but I think important inquiry... I am giving myself a crash course on VoIP/QoS and have some trouble with the foundation of it. Some is conceptual and some is practical. So far I understand the ip precedence, DSCP and different types of shaping, etc. I found that on the call signaling side we were missing to detect under one policy the CS3 and CS6 traffic... all voice media is, apparently, marked EF and guaranteed bandwidth percent. I don't have the luxury of a lab right now, and have been trying to optimize our voice on the locations with poor bandwidth (1.5Mbps T1) ... One thing I don't understand is how this traffic is originally created with the marked header? Is it the actual cisco phone? is it a setting in call manager? is it call manager itself? is it because of the specific command or configuration within each switch "switchport voice vlan 100"? is it the combination of some or all of the above? I am trying to learn as I go. I have foundation, good understanding of networks, traffic, packets, routing, etc. Some VoIP foudndation... but lack a solid QoS foundation to better serve our immediate needs. Here is what I developed so far and found to be useful, although I am unsure of the "input" service policy. It seems to have helped, but honestly I'd like to know exactly why. And what I lack is the knowledge of how the packets are created by what... If anyone can shed some light here it would be a tremendous help!! Thank you for reading! access-list 100 permit udp any any range 16384 32767 access-list 100 permit udp any any range 5060 5100 access-list 100 permit tcp any any range 5060 5100 access-list 100 permit tcp any any eq 1720   class-map match-any call_signaling  match ip dscp af31  match ip dscp cs3  match ip dscp cs6 class-map match-any voice_media  match ip dscp ef class-map match-all inboundvoip  match access-group 100 ! ! policy-map voip  class voice_media   priority percent 50  class call_signaling   bandwidth remaining percent 20  class class-default   fair-queue policy-map mqc  class inboundvoip   set ip precedence 5  class class-default   set ip precedence 0   ... View more