After policy install SIP communication is dropped on 'old packer rulebase drop', although the newly installed policy allows it. Deleting the connections manually from the fw table resolves the issue, so does rebooting the VoIP gateways.
zdebug shows dropped by fw_handle_old_conn_recovery Reason: old packet rulebase drop; on port 5060
It seems like the problem described in sk140112, but newly installed policy does not change SIP rules in any way and still allows it. If fact it happened even after just installing the same policy without any change.
Changing connection persistence to Keep all connection seems to help.
This happens only sometimes, I didn't figure the conditions yet. Anybody with similar issue?
R80.40 JHFA125 both gw and management. GW is 3600 appliance. VoIP is configured according to ARTG, only sip services relevant for R80.40 used.