General discussion

Public·2 members

February 14, 2023

SIP flow with TCP - SIP TCP cleartext - behavior of the 3 possible options.

Hello good afternoon to everyone in PANgurus!

For an environment with TCP-SIP with the ALG disabled at App "SIP" level and/or with AppOverride, I would understand that these options should no longer generate any noise, problem or unwanted behavior no ?

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-setup-session/tcp-settings#:~:text=Select%20one%20one%20of%20the%20following%20options%20to%20set%20the%20cleartext%20proxy%20behavior%20for%20SIP%20TCP%20sessions%20when%20a%20segmented%20SIP%20header%20is%20detected.

Has anyone had cases with SIP TCP with the ALG disabled at App "SIP" level and/or with AppOverride, with SIP-TCP flows.

What is the recommended option(s), for an environment like the one discussed, when setting, setting and/or applying the correct option.

SIP TCP cleartext:

-Always Off

-Always enabled

-Automatically enable proxy when needed

Thanks for the comments, collaboration and your time

Best Regards!

35 Views

Reaper

Feb 22, 2023

SIP is like voodoo to me. It's either default app-id, app-id with ALG disabled, app override to custom app, app override to sip (yes I've had to do this once because sip was swapping g the sequence of 2 packets causing normal app-id to fail)

That's a long-winded way of saying I have no idea what those options do

Members

Reaper
sahil salokhe

See All Members (2)