firewall test SIP ALG problem (part 2)

[pcmis]

I am following up on this post https://www.3cx.com/community/threads/firewall-test-sip-alg-problem.50931/

I have Cisco ASA 5516. I worked extensively with a CCIE support person who insisted that SIP ALG needs to remain on to function properly.

I am not currently experiencing any call issues, and I do also have SIP ALG ('inspect SIP' on global policy)

What type of issues should I be experiencing when this is on? I just want to make sure I don't have issues down the road when I add more users.

thank you!

 

[cobaltit]

Well you haven't said anything about your setup, so SIP ALG may not come into play at all. For example, if your PBX is local and you have a local gateway and no remote extensions it really doesn't matter what your firewall is doing as the SIP traffic never passes through it.

 

[pcmis]

thanks for the responses...I would say the majority of phones are on the same LAN as the local PBX, but I do also have remote extensions. I have some people (including myself) with phones at their houses, and also allow android and iphone apps to connect in. I have not experienced issues with the remote extensions either. I just wanted to be sure because I ran the firewall check and this came up as only issue. I guess I wil leave active until I see any issues. Thanks!