Loge VK wrote:
> You need to tinker with Smart Defense settings for VOIP - SIP. Uncheck the
> SIP protections, it will work fine.
> Also CP doesnot support all the SIP rfc extensions so alongwith SIP service
> you might need to enable access to the data port(RTP) your setup will use.
> it should work fine with encrypted traffic.
>
Hi,
I have the same problem on NGX SPLAT with HFA_02. The only way to
solve it seems to set to NONE
the advanced properties of SIP protocol.
Any hints ?
many thanks in advance,
Fabio.
> - Loge VK
> On 11/30/05, Richard Turner <[EMAIL PROTECTED]> wrote:
>
>> Hi,
>>
>> Wondered if anyone out there can help me with SIP?
>>
>> Using R55 on windows.
>>
>> I have a SIP server (asterisk) internally. I wanted to
>> have staff at home using their SecureClients in Office
>> mode able to connect to the asterisk server to make
>> calls etc. When ever the software clients connect to
>> the server to register I get SIP errors on the
>> firewall
>>
>> I've tried a number of combinations - with and without
>> Office mode, with and with out encryption and I get
>> errors like :
>> sip reason: Illegal redirection
>> xxx.xx.13.41->192.168.1.2
>>
>> or
>> sip reason: Attack Info - Malformed SIP datagram,
>> OPTION message is out of state
>> or
>>
>> message_info: Connection contains real IP of NATed
>> address
>>
>>
>> I have tried an number of rules but mainly along the
>> line of
>>
>> Any VoipDomain SIP_any client_encrypt
>>
>> where VoipDomain contains my internal network and the
>> asterisk server.
>>
>> Should I abandon this and go for unencrypted traffic?
>> If I give the asterisk server a static nat address, it
>> it enough to use the VOIPDomain object as the
>> destination object?
>>
>> Any help would be appreciated
>>
>> Richard
>>
>> =================================================
>> To set vacation, Out-Of-Office, or away messages,
>> send an email to [EMAIL PROTECTED]
>> in the BODY of the email add:
>> set fw-1-mailinglist nomail
>> =================================================
>> To unsubscribe from this mailing list,
>> please see the instructions at
>> http://www.checkpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> [EMAIL PROTECTED]
>> =================================================
>>
>>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
