Sip H323 ALG on ASA/Pix

[quazimotto]

Gents,

Do any of you use Cisco ASA/Pix firewalls for creating site to site VPNs? DO you turn the ALGs off?

Thanks/Quaz

 

[janni78]

SIP ALG might be needed in some implementations but I always turn off H323 ALG.

"Trying is the first step to failure..." - Homer

 

[quazimotto]

Janni78,

Good call. I turned the H323 ALG off on my pix all the IP phones came right up. Jannis78, if these ALGs are there to make life easier traversing NAT, why do they do the exact opposite in most cases?

Thank you for you reply.

Quaz

 

[gwebster]

Avaya phones use a modified version of H.323. H.323 ALG in a router tend to block the signaling which is needed for Avaya H.323 phones to work.