Solved

juniper SSG20 firewall has video conferencing issue

Posted on 2014-10-04
1
234 Views
Last Modified: 2014-11-05
I have a New Livesize VC unit behind a Juniper FW on a DMZ directly attached (VC to FW) On FW I have Comcast Business Internet on a port that is configured with MIP that maps one static to the DMZ subnet and VC address. However, When I run a VC call the calls randomly drop when calling an identical VC unit. or any VC unit. Call could last 5 min, 1 min, 20 min etc.. The rules on the FW allow only access to SIP, H323 and Ports needed for Lifesize.
I need to ID if the issue is with the FW or the Carrier. I've attached the config for review on the FW.
Could some sort of packet inspection or FW overload cause the session to just Drop?
If the quality of the connection degrades either latency or band-with, the call should degrade, not just drop. It seems as if either the carrier or the FW is killing the session once established. Any ideas would be appreciated.
FW-Config.txt
0
Comment
Question by:BWA IT
1 Comment
 
LVL 18

Accepted Solution

by:
Sanga Collins earned 500 total points
ID: 40362118
usually when I have issues with VOIP and video conf traffic, I make sure SIP ALG is disabled and the outbound policy for my voice traffic has source based NAT enabled.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

805 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question