topic Re: Simulate SIP Traffic in Lab in General Topics

Simulate SIP Traffic in Lab

JasonMcNulty — Thu, 18 Mar 2021 14:22:44 GMT

Hello Everyone,

Like most on this form, I believe I am having issues with SIP, which is causing some soft phones to reset. I have started gathering a list of possible fixes that have been posted by the community and Palo Alto. I want to try these fixes in a lab environment so I do not cause any issues in production.

Does anyone know if a way to simulate SIP traffic? I have been using Solar Winds WAN killer to sent traffic over UDP port 5060, and that works, but is not picked up as SIP via Palo Alto's App-ID.

Re: Simulate SIP Traffic in Lab

OtakarKlier — Thu, 18 Mar 2021 16:20:19 GMT

Hello,

The way I used to test this was to put the LAB PAN between my workstation and the rest of the network. Not ideal but it was live data. Not sure it will work in every network due to design, etc.

Regards,

Re: Simulate SIP Traffic in Lab

BPry — Thu, 18 Mar 2021 16:28:39 GMT

@JasonMcNulty,

Due to app-id you really need to be passing real traffic. It would be pretty quick to spin up a quick Asterisk instance and use a soft client to actually generate real SIP traffic for testing purposes to work with however. That would really be my recommendation, so you are actually working with real SIP traffic and can see if you've truly fixed the issue.

Re: Simulate SIP Traffic in Lab

JasonMcNulty — Tue, 23 Mar 2021 13:52:10 GMT

Thank you for the replies, I'm going to install Asterisk is my lab to see it is will match the App-ID of SIP. If so, then I'm going to create a custom application to perform an application override as detailed below.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClouCAC