topic Sip problem in Firewall and Security Management

Sip problem

Dmitriy_V — Mon, 02 Oct 2023 07:11:13 GMT

Hello,

we faced some weird problems with our Checkpoint R80.40 Take 198.
We analyzed capture files for SIP invites entering Checkpoint and leaving it we found that Checkppoint changes source port of SIP invite message from 5060 to something different.
Because of that our SIP connection to provider crashes.
Sometime it fixes randomly by itself, and then crashes again.
How can we determine which policy or configuration provokes this behaviour and how can we fix it?

Re: Sip problem

PhoneBoy — Mon, 02 Oct 2023 13:06:02 GMT

First of all, you should upgrade since R80.40 will be End of Support in January 2024.
Second, please provide screenshots of the exact rules used to allow SIP traffic.
Specifically, we need to see the exact services used to allow the traffic.

Re: Sip problem

the_rock — Mon, 02 Oct 2023 13:34:03 GMT

To save you time opening TAC case, you might as well go through below sk, as Im 100% positive thats what they would send you in the 1st email anyway : - )

Andy

ATRG:VOIP