• Name: my_h323_gatekeeper_service
• Type: UDP
• ALG: my_h323_alg
• Destination port: 1719
3. Click OK
Create the SAT IP rules for incoming gatekeeper traffic:
1. Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2. Now enter:
• Name: H323In
• Action: SAT
• Source Interface: any
• Source Network: all-nets
• Destination Interface: core
• Destination Network: wan_ip (external IP of the firewall)
• Service: my_h323_gatekeeper_service
• Comment: SAT rule for incoming communication with the gatekeeper located at
ip-gatekeeper.
3. For SAT enter Translate Destination IP Address: To New IP Address: ip-gatekeeper (IP
address of gatekeeper).
4. Click OK
1. Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2. Now enter:
• Name: H323In
• Action: Allow
• Source Interface: any
• Source Network: all-nets
• Destination Interface: core
• Destination Network: wan_ip (external IP of the firewall)
• Service: my_h323_gatekeeper_service
• Comment: Allow incoming communication with the gatekeeper.
3. Click OK
Chapter 6: Security Mechanisms
492
To Next Page
