topic Re: SIP failed to Register for VOIP Phones in Firewall and Security Management

SIP failed to Register for VOIP Phones

SecuRemote — Wed, 07 Apr 2021 02:52:37 GMT

Hi,

We replaced our client Branch Office firewall from Sophos to Checkpoint, the Checkpoint is centrally managed by the Head Office management server. However, the Branch Office VOIP Phones failed to register to their CUCM. The CUCM is located in Head Office and uses VPN to connect from the Branch Office network.

As testing, we only set the VPN rule service to Any and I added exceptions on the inspection policy for the Branch Office network as source. However it still failed to register. Upon checking there are no blockings on the logs from the IP of the said phone.

I attached the screenshot of the logs & rule.

Is there any more policy/inspection rules that may be a caused of the said problem?

I hope someone may help us.

Thanks!

Re: SIP failed to Register for VOIP Phones

Jan_Kleinhans — Thu, 08 Apr 2021 07:04:28 GMT

Hello,

are you doing any NAT between the gateways ? Have you tried to create an explicit rule for sip_tcp and sip_udp ?

Regards,

Jan

Re: SIP failed to Register for VOIP Phones

SecuRemote — Thu, 08 Apr 2021 07:50:47 GMT

HI Jan,

Yes we already tried to create explicit rule for sip_tcp & sip_udp but still shows the phones are not registered. We also added static nat from the branch network to the voip server for the access to not be translated but still shows the same issue.

Regards!