topic Re: SIP TRunk over PA6-440 not working in Next-Generation Firewall Discussions

SIP TRunk over PA6-440 not working

Abdelhak — Wed, 27 Mar 2024 14:39:41 GMT

we have just migrated from Cisco ASA to palo alto 440 firewall

we have a SIP trunk between IP telephony server CUCM installed on our site and another installed on remote site

the communication is done over a tunnel ipsec VPN

from our site we can ping from CUCM locally to the remote

the communication is full allowed between servers (i can see the SIP logs is allowed on moitor traffic GUI)

i disabled SIP ALG but the SIP trunk still down

i need help

zGomez — Thu, 04 Apr 2024 13:26:15 GMT

Hi Abdelhak,

Is the traffic getting dropped on palo?

I would do a debug flow basic for the source - destination.

Also taking a packet capture might reveal what is going on.

Most of the time the ALG is causing issues but since you disable it might be something else in any case the debug flow should reveal it.