topic SIP - services only, does ALG apply? in General Topics

SIP - services only, does ALG apply?

dpride — Fri, 13 Oct 2017 14:45:06 GMT

I am troubleshooting Cisco phone registration issues through a 3020 running 7.1.7 . My rulesets are only service based (TCP/UDP 5060, 5061, etc) and allow any application. Cisco TAC is telling me that ALG issues are interfering with registration.

If I am allowing any application and using services only (and the traffic is hitting these rules), is SIP inspection or ALG still being applied to the traffic?

Re: SIP - services only, does ALG apply?

Raido_Rattameister — Fri, 13 Oct 2017 14:58:42 GMT

Yes by default Palo Alto always identifies application.

You can either disable ALG or play around with application override. In this case Palo Alto will stop at Layer 4 and you can manually specify what application Palo should identify this traffic as.

https://live.paloaltonetworks.com/t5/Management-Articles/SIP-Application-Override-Policy/ta-p/69349