topic Re: SIP Invite messages address translation. in General Topics

SIP Invite messages address translation.

hcampuzano — Tue, 19 Sep 2023 18:24:48 GMT

Hello Checkmates.

As the subject mention, I'd like to ask you if the firewall is capable to translate the destination address in a SIP Invite message from an External IP address to a private one.

A VoIP service provider is hosted online, and it need to reach a call manager inside our network. To do so, a NAT needed to be create and I was requested to create it.

I already did, I created the Static NAT rules and reverse ARP. The NAT is working as the firewall logs show the translation happening both ways.

However, in the call manager some logs were capture indicating that the SIP INVITE message is invalid, as it points to the public IP address.

Could anyone please advise?

Re: SIP Invite messages address translation.

PhoneBoy — Tue, 19 Sep 2023 19:20:06 GMT

See: https://support.checkpoint.com/results/sk/sk95369
NAT (and the limitations thereon) are covered there.

Re: SIP Invite messages address translation.

the_rock — Tue, 19 Sep 2023 19:45:11 GMT

I would say contact TAC if that sk does not help you.

Andy

Re: SIP Invite messages address translation.

hcampuzano — Wed, 20 Sep 2023 17:56:22 GMT

The problem was solved by not defining special Network objects to allow SIP signaling, but using regular Network objects on the access rule.

Thanks for sharing the SK.

Re: SIP Invite messages address translation.

the_rock — Wed, 20 Sep 2023 18:40:25 GMT

Good job! 👍