Inspecting VoIP Traffic
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|250
After you apply these settings, rules are automatically created in the Firewall Access Policy
page for Outgoing access to the Internet and Incoming, Internal and VPN traffic.
Notes:
n
For an on-premises configuration without PBX, the destination should be the IP_
Phones object.
n
If you allow access to the PBX portal, another rule is created:
Source Destination
Application /
Service
Action Log Comment
Any PBX-Server HTTP/S Accept None Generated
rule: SIP
VOIP
Forwarding rules are automatically created in the Access Policy > NAT Rules page.
Note - For external phones with remote access, the Office Object is automatically
created in the Network Objects section and the " set back connection" setting
is set to "true".
Follow these configuration procedures to allow SIP traffic to pass through the gateway when:
n
The SIP server is located on external networks. For more advanced topologies, refer to
sk113573.
n
The gateway's NAT configuration is set to its default settings (with internal networks
hidden behind its external IP address).
Configuration
To allow the SIP server to connect to internal phones from the Internet:
1. Go to Access Policy > Policy.
2. Add a rule to the Incoming, Internal and VPN traffic Rule Base that allows SIP traffic:
Source Destination
Application /
Service
Action Log
A network
object that
holds the IP
address of the
SIP server
A network object that
holds the IP
addresses of the
phones behind the
gateway
SIP Accept Select the
applicable
option
For more information, see
"Working with the Firewall Access Policy" on page216
.
To Next Page
