UC500 Behind Firewall

[ciscojoe837]

Is there a lab that demonstrates how to setup a UC520/540 behind an SA520.  As well is there one that deals with third party firewalls like SonicWALL.  If find most customers will have an existing firewall to work with.

Thanks.

[Darren DeCroock]

Yes, there is a lab for setting up a UC500 behind an SA520...

https://supportforums.cisco.com/docs/DOC-9836

Lab #6..

All the other labs are listed there as well.

Thank you,

Darren

[ciscojoe837]

Thanks for that.  It doesn't mention anything about adding a static route.  I read another doc that said something about having to add a static route, which I was confused on.

Is there also a lab on the ASA5505 put in front since it doesn't have the CCA but similar to the SA520?

Finally, I've never seen a SIP ALG feature on any firewall.  How can you tell if a firewall is ALG-aware?

Thanks again.

[David Hornstein]

Hi ciscojoe,

If you want clarification regarding presence of SIP ALG refer to the administrator guide of the SA520 , But for the sake of saving you some time.

http://www.cisco.com/en/US/docs/security/multi_function_security/multi_function_security_appliance/sa_500/administration/guide/SA500_AG_0L911402.pdf

There are numerous references to the SIP ALG in the Administrators guide, but page 147 states "

SIP ALG (Session Initiation Protocol Application-level gateway) can rewrite information within the SIP messages (SIP headers and SDP body) to make signaling and audio traffic between the client behind NAT and the SIP endpoint possible.

Note  SIP-ALG should be enabled when voice devices such as the UC 500 or SIP phones are connected to the network behind the security appliance."

If you are interested in checking out some free training on the ASA5505  try the following URL;

http://www.cisco.com/web/learning/le31/le29/configuring_asa_pix_security_appliances.html

hope this helps.

regards Dave