Example 6.9. Protecting Internal H.323 Phones Using IP Rules
In this example, an internal H.323 phone is situated on lannet and has a public IP address. To
make it possible to place a call from this phone to another H.323 phone on the Internet, and to
allow H.323 phones on the Internet to call this phone, we need to configure IP Rule objects.
Note: Make sure there are no other rules/policies disallowing or allowing the same kind of
ports/traffic before the IP rules in this example.
Web Interface
Create a new H.323 ALG object:
1. Go to: Objects > ALG > Add > H.323 ALG
2. Specify a name for the ALG, in this case my_h323_alg
3. Click OK
Create a custom Service object for H.323:
1. Go to: Objects > Services > Add > TCP/UDP
2. Now enter:
• Name: my_h323_service
• Type: TCP
• ALG: my_h323_alg
• Destination port: 1720
3. Click OK
Create an IP rule for outgoing H.323 traffic:
Chapter 6: Security Mechanisms
482
To Next Page
Loading...
