Best method to see blocked RTP traffic?

[OMatlock]

Hi folks,

There is an issue with our Lync VOIP system and consultants are saying they think that RTP traffic if being blocked inbound to our firewall.

What is the best method to verify that?

Traffic log or do I need to do a packet capture?

Thanks

[ansharma · Accepted solution]

OMatlock,

The traffic logs would only show up if the packets were not dropped. 
I'd say check the traffic logs first, if there's nothing, we'd do pcaps and flow basic (debug logs).

Reference KBs

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Run-a-Packet-Capture/ta-p/62390 

https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-Flow-Basic/ta-p/72556 

Regards,

Anurag

[OMatlock]

Thank you for that feedback!