<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Avaya  RTP UDP traffic dropped in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/avaya-rtp-udp-traffic-dropped/m-p/367278#M88819</link>
    <description>&lt;P&gt;Hi All&lt;/P&gt;&lt;P&gt;Trying to get a path working for an Avaya solution. I can see in the log that SIP traffic is flowing without issue. When the user tries to make a call I should see some UDP traffic within a specified range but I do not see it in the logs.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have performed a packet capture and I can see that the UDP traffic, showing as RTP, is being dropped but I cannot fathom out why. There is a specific policy for this and traffic levels shouldn't kick in UDP overflow. I feel it may be the SIP ALG which is turned on but unsure if that is the specific answer.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any ideas? Has anyone experienced this before?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Adrian&lt;/P&gt;</description>
    <pubDate>Fri, 04 Dec 2020 12:21:16 GMT</pubDate>
    <dc:creator>a.jones</dc:creator>
    <dc:date>2020-12-04T12:21:16Z</dc:date>
    <item>
      <title>Avaya  RTP UDP traffic dropped</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/avaya-rtp-udp-traffic-dropped/m-p/367278#M88819</link>
      <description>&lt;P&gt;Hi All&lt;/P&gt;&lt;P&gt;Trying to get a path working for an Avaya solution. I can see in the log that SIP traffic is flowing without issue. When the user tries to make a call I should see some UDP traffic within a specified range but I do not see it in the logs.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have performed a packet capture and I can see that the UDP traffic, showing as RTP, is being dropped but I cannot fathom out why. There is a specific policy for this and traffic levels shouldn't kick in UDP overflow. I feel it may be the SIP ALG which is turned on but unsure if that is the specific answer.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any ideas? Has anyone experienced this before?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Adrian&lt;/P&gt;</description>
      <pubDate>Fri, 04 Dec 2020 12:21:16 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/avaya-rtp-udp-traffic-dropped/m-p/367278#M88819</guid>
      <dc:creator>a.jones</dc:creator>
      <dc:date>2020-12-04T12:21:16Z</dc:date>
    </item>
    <item>
      <title>Re: Avaya  RTP UDP traffic dropped</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/avaya-rtp-udp-traffic-dropped/m-p/367369#M88826</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/109121"&gt;@a.jones&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;Just to verify, you've enabled logging on the interzone-default and intrazone-default entry so that anything getting dropped there is actually recorded correct? If not, go ahead and do that so you can see if it's dropping due to not hitting the expected entry.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 04 Dec 2020 18:44:08 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/avaya-rtp-udp-traffic-dropped/m-p/367369#M88826</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2020-12-04T18:44:08Z</dc:date>
    </item>
    <item>
      <title>Re: Avaya  RTP UDP traffic dropped</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/avaya-rtp-udp-traffic-dropped/m-p/367539#M88844</link>
      <description>&lt;P&gt;Hi BPry,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;yes, we are logging the inter and intrazones and the traffic does not appear there, or if I look at the sessions. The traffic is dropped before it hits the policy. I normally see something like that for a hung session or if NAT is not in place but this is not the case. I have a static NAT for the traffic. I see the SIP traffic but all UDP traffic is dropped.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I ran a port scan on the UDP range concerned and this appeared on the correct rule.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Adrian&lt;/P&gt;</description>
      <pubDate>Sun, 06 Dec 2020 15:15:26 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/avaya-rtp-udp-traffic-dropped/m-p/367539#M88844</guid>
      <dc:creator>a.jones</dc:creator>
      <dc:date>2020-12-06T15:15:26Z</dc:date>
    </item>
  </channel>
</rss>

