Exclude H323 and SIP inspection for Video calls

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Exclude H323 and SIP inspection for Video calls

Not applicable

How to exclude H323 and SIP inspection  for Video calls on Palo Alto?

Thanks in advance !

Regards,

Velmurugan K

3 REPLIES 3

L7 Applicator

You would create an application override policy for the traffic.  This will prevent the application of the inspection and treat the traffic as a standard port based firewall.

How to Create an Application Override Policy

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

L7 Applicator

Hello Velmurugan,

If the device running PAN OS version 6.0.x, there is an option to disable to SIP ALG ( Application layer gateway), which effectively skip the layer 7 inspection.

How to Disable SIP ALG

Thanks

The SIP disable is a global function and not per policy.  And this is a PanOS 6 only feature.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
  • 4042 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!