SIP thorugh MBG 7.1

[Mitelmatt]

HI GUys

I have an MBG in DMZ behind a Checkpoint firewall. Minet phnes working fine. However can;t get sip phones to work.

Got customer to turn off SIP ALG in check point and now they register to the MBG but they won;t "Proxy" to the 3300 and register.

Looking at the firewall, when these try to register, it looks like the firewall is sending the request direct to the INTERNAL ip of the Sip phone at the remote site! i.e. 192.168.0.127, rtaher than sending it all back via the MBG etc

Any ideas?

 

[danramirez]

Make sure your firewall is programed correctly. Follow MBG eng. guidelines. Most likely you are missing a route or policy in your f/wall. Is your f/wall forwarding udp 5060 to local ip of your MBG?

 

[Mitelmatt]

Hi dan

Yes it appears to be,

On second look at the firewall , it,s being blocked saying something about going from the internal of the mug to the internal of the remote end, completely missing the nat?

 

[danramirez]

Mitelmatt,

Have a look at this document I prepared a couples of months ago. It shows all policies in the firewall. It's a Fortigate Virtual Machine but I'm sure it will be of help, at least it will show the policies.

https://www.yousendit.com/dl?phi_ac...e87cc6244&s=19105&cid=tx-02002208350200000000

Regards,


Daniel

 

[Mitelmatt]

Hi Dan, any chance you can post this again as it has expired and i didnt save it!

Thanks