38-36
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 38 Configuring Inspection for Voice and Video Protocols
Skinny (SCCP) Inspection
• Actions—Primary action and log settings.
–
Action—Drop packet, drop connection, reset, log. Note: Limit rate (pps) action is available for
request methods invite and register.
–
Log—Enable or disable.
Modes
The following table shows the modes in which this feature is available:
Skinny (SCCP) Inspection
This section describes SCCP application inspection. This section includes the following topics:
• SCCP Inspection Overview, page 38-36
• Supporting Cisco IP Phones, page 38-37
• Restrictions and Limitations, page 38-37
• Select SCCP (Skinny) Map, page 38-38
• SCCP (Skinny) Inspect Map, page 38-38
• Message ID Filtering, page 38-40
• Add/Edit SCCP (Skinny) Policy Map (Security Level), page 38-40
• Add/Edit SCCP (Skinny) Policy Map (Details), page 38-41
• Add/Edit Message ID Filter, page 38-42
SCCP Inspection Overview
Note For specific information about setting up the Phone Proxy on the adaptive security appliance, which is
part of the Cisco Unified Communications architecture and supports IP phone deployment, see
Chapter 43, “Configuring the Cisco Phone Proxy.”.
Skinny (SCCP) is a simplified protocol used in VoIP networks. Cisco IP Phones using SCCP can coexist
in an H.323 environment. When used with Cisco CallManager, the SCCP client can interoperate with
H.323 compliant terminals.
The adaptive security appliance supports PAT and NAT for SCCP. PAT is necessary if you have more IP
phones than global IP addresses for the IP phones to use. By supporting NAT and PAT of SCCP Signaling
packets, Skinny application inspection ensures that all SCCP signalling and media packets can traverse
the adaptive security appliance.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—
To Next Page
Loading...
Need help?
General
