topic Re: Best method to see blocked RTP traffic? in General Topics

Best method to see blocked RTP traffic?

OMatlock — Thu, 06 Apr 2017 15:37:22 GMT

Hi folks,

There is an issue with our Lync VOIP system and consultants are saying they think that RTP traffic if being blocked inbound to our firewall.

What is the best method to verify that?

Traffic log or do I need to do a packet capture?

Thanks

Re: Best method to see blocked RTP traffic?

ansharma — Thu, 06 Apr 2017 18:32:26 GMT

OMatlock,

The traffic logs would only show up if the packets were not dropped.
I'd say check the traffic logs first, if there's nothing, we'd do pcaps and flow basic (debug logs).

Reference KBs

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Run-a-Packet-Capture/ta-p/62390

https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-Flow-Basic/ta-p/72556

Regards,

Anurag

Re: Best method to see blocked RTP traffic?

OMatlock — Thu, 06 Apr 2017 18:58:33 GMT

Thank you for that feedback!