SIP ALG need to be disabled

Vijaygvasan — Thu, 11 Nov 2021 06:28:49 GMT

We need to block SIP ALG on our firewall which is running 10.0.7.

Which does not have the option to disable under object---->Application---> SIP.

I came across with this document

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEsCAK

which stated to disable the SIP ALG but as this PAN OS doesnt have the option please share the same.

Let me know the possibilities.

Cheers!!

Re: SIP ALG need to be disabled

aleksandar.astardzhiev — Thu, 11 Nov 2021 15:24:18 GMT

Hi @Vijaygvasan

As you can see from official documentation disabling SIP ALG globaly is similar to previous versions - https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/app-id/disable-the-sip-application-level-gateway-alg.html

- Can you send a screenshot similar to the one from the docs?

- As you can see from the link you have found there is a way to disable SIP ALG globally over CLI. Have you tried it?

- Are you using admin account that have full write access to FW? Are you managing policy locally or with Panorama?

I don't have any FW running 10.0 to test, but the option should definately be there. However you still struggle with disabling it globaly and need to apply it as soon as possible - you may want to consider Application Override rule that will match the traffic in question and override the application to custom app.

topic Re: SIP ALG need to be disabled in General Topics

SIP ALG need to be disabled

Re: SIP ALG need to be disabled