[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

SONICWALL TZ215 SETUP FOR HYBRID PHONE SYSTEM

Posted on 2016-11-04
3
Medium Priority
?
56 Views
Last Modified: 2016-11-24
the following steps where completed:
UDP global time out set to 120
Default UDP Connection Timeout (seconds):  120
VOIP tab, the only item checked is "Enable Consistent NAT". Everything else, include "Enable SIP Transformations" is unchecked.
Created inbound firewall/NAT rules for the ports service objects and address objects.
have a 50 X 5 for 8 active phones.
on traffic statics i am getting many connection handshake timeouts.
0
Comment
Question by:Avi Leibzon
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 31

Accepted Solution

by:
masnrock earned 2000 total points (awarded by participants)
ID: 41875299
What type of PBX? SonicWalls are bad at handling VoIP functions. Try changing the UDP timeout from 120 to 1200.

I would suggestion disabling consistent NAT especially after doing the following:

Talk to Sonicwall and request HF152075. Their engineering group will have to create the firmware for you, which may take a few weeks. However, it will let you do the Disabled Source Port Remap direction in step 4 of this guide:
http://www.3cx.com/blog/voip-howto/sonicwall-firewall-configuration/

I had issues with drops and whatnot for a SIP trunk until I applied this.
0
 
LVL 17

Expert Comment

by:ccomley
ID: 41900228
You dont' say what the phone system is. But in our experience, most modern phone systems do not require the router or firewall to "fix up" the NAT mappings for SIP and turning on Sip Transforms can cause problems. I would suggest checking what your phone system says in the manual about NAT Traversal, but I would be surprised if it doesn't say do NOT use a SIP ALG.
0
 
LVL 31

Expert Comment

by:masnrock
ID: 41900311
Question answered
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Transferring data across the virtual world became simpler but protecting it is becoming a real security challenge.  How to approach cyber security  in today's business world!
Why do some people recommend buying business VoIP from an ISP? What are the benefits to my company? What are the costs?
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question