topic Re: Behaviour RTCP sessions in General Topics

Behaviour RTCP sessions

soporteseguridad — Thu, 21 Jun 2018 09:05:08 GMT

We are having a weird behaviour with rtcp-base and rtcp apps.

Re: Behaviour RTCP sessions

BPry — Tue, 19 Jun 2018 15:09:57 GMT

@soporteseguridad,

What does eithe security policy actually look like, could you post how you have those configured as well?

Re: Behaviour RTCP sessions

soporteseguridad — Thu, 21 Jun 2018 09:04:45 GMT

Hi,

Re: Behaviour RTCP sessions

BPry — Tue, 19 Jun 2018 15:45:09 GMT

@soporteseguridad,

I'ts because you have an application specified when specifying the service as 'any'. The first few packets in a flow are unable to be identified as rtcp or rtp-base traffic and will therefore match your Temp rule until the traffic is identified. When the application changes and goes back through the security policy it will match your 'Telefonica Hacia Sede' policy as it now has the proper app-id identified.

Re: Behaviour RTCP sessions

soporteseguridad — Wed, 20 Jun 2018 07:37:23 GMT

Yes, but we dont see "incomplete" and some sessions are matching with the same values. So if we dont have a below rule with any, this traffic would be denied??? What it would be the best practices to match only in the correct rule?

Re: Behaviour RTCP sessions

fjwcash — Wed, 20 Jun 2018 19:49:07 GMT

Set the application like you have it.

Change the service field to "application-default". Or, if you are running rtp/rtcp on non-standard ports, then list those ports here.