Solved

juniper SSG20 firewall has video conferencing issue

Posted on 2014-10-04
1
231 Views
Last Modified: 2014-11-05
I have a New Livesize VC unit behind a Juniper FW on a DMZ directly attached (VC to FW) On FW I have Comcast Business Internet on a port that is configured with MIP that maps one static to the DMZ subnet and VC address. However, When I run a VC call the calls randomly drop when calling an identical VC unit. or any VC unit. Call could last 5 min, 1 min, 20 min etc.. The rules on the FW allow only access to SIP, H323 and Ports needed for Lifesize.
I need to ID if the issue is with the FW or the Carrier. I've attached the config for review on the FW.
Could some sort of packet inspection or FW overload cause the session to just Drop?
If the quality of the connection degrades either latency or band-with, the call should degrade, not just drop. It seems as if either the carrier or the FW is killing the session once established. Any ideas would be appreciated.
FW-Config.txt
0
Comment
Question by:BWA IT
1 Comment
 
LVL 18

Accepted Solution

by:
Sanga Collins earned 500 total points
ID: 40362118
usually when I have issues with VOIP and video conf traffic, I make sure SIP ALG is disabled and the outbound policy for my voice traffic has source based NAT enabled.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now