Check Point QUANTUM SPARK 1600 - Inspecting VoIP Traffic; Introduction; To configure VoIP inspection in the WebUI

Inspecting VoIP Traffic
Quantum Spark 1500, 1600, and 1800 Appliances R81.10.X Locally Managed Administration Guide|175
Inspecting VoIP Traffic
Introduction
Voice over Internet Protocol (VoIP) is a technology to deliver voice communications and multimedia
sessions over Internet Protocol (IP) networks, such as the Internet. There are two primary delivery methods:
private or on-premises solutions, or externally hosted solutions delivered by third-party providers.
Inspection of VoIP traffic is supported on all Quantum Spark appliances.
To configure VoIP inspection in the WebUI:
1. Go to Access Policy > VoIP.
2. Click On.
If VoIP is already configured, you can edit the current configuration.
3. For the next sections, click the downward arrow to expand.
4. Click the Off-premise SIP Provider Service heading to expand the section.
Configure the applicable settings:
a. Click the checkbox for Use SIP Provider – The available network objects are shown in a table
with a Group name. You can select a single IP or a range of servers with external IP address.
b. To add a new IP address, click New. To remove an IP address, select it and click Remove.
c. Select or clear the option Log traffic from this provider.
d. Select or clear the option Disable SIP traffic inspection.
When you select this option, you allow the application level inspection and NAT for the SIP
traffic.
When you clear this option:
n
You must configure the RTP ports manually.
n
The timeout for UDP SIP connections (the "SIP_UDP" service) is the same as the
default timeout for TCP SIP connections (the "SIP_TCP" service).
Note - In the R81.10.X releases, this feature is available starting from the
R81.10.05 version.
e. Select to Enable bidirectional traffic when the SIP provider is defined. This allows bidirectional
traffic with the SIP service provider.
If the service does not accept replies, bidirectional traffic is not established. A popup window
opens and asks if you want to continue.
5. Click the On-premise Devices heading to expand the section.
The network objects appear in a table, with a Group name.
Click New to add an item.
Select an item and click Remove to delete it.
Configure the applicable settings.