This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About AdamsCoGovt
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About AdamsCoGovt
03-30-2016
9Posts
0Likes
0Solutions
Mar 30, 2016Last Visited
User
Activity
User
Profile
Latest posts by AdamsCoGovt
| Subject | Views | Posted |
|---|---|---|
| 1421 | 09-13-2012 11:13 AM | |
| 5390 | 06-14-2012 11:15 AM | |
| 2118 | 06-05-2012 01:15 PM | |
| 6736 | 06-05-2012 08:11 AM | |
| 5388 | 06-04-2012 07:06 AM | |
| 5385 | 05-31-2012 08:12 AM | |
| 5344 | 05-04-2012 11:40 AM | |
| 5344 | 05-04-2012 10:25 AM | |
| 10173 | 05-01-2012 12:10 PM |
User Badges
Community Statistics
| Member Since | 03-08-2012 06:37 AM |
| Date Last Visited | 03-30-2016 04:20 PM |
| Posts | 9 |
09-13-2012
11:13 AM
The Adobe Flash player download page is being blocked as the following threat: Name: Virus/Win32.encryptedcontainerdeleted;.dwf ID: 2488533 Severity: MEDIUM Description: This signature detected Virus/Win32.encryptedcontainerdeleted;.dwf Is there something bugged in the latest Antivirus release? Our PA-500 is on Antivirus release 833-1147.
... View more
Labels:
- Labels:
-
Content-ID
-
Troubleshooting
06-14-2012
11:15 AM
Never really got any tangible progression. Ultimately, we decided to stop pursuing the issue and wait for our new phone system upgrade after the first of the year. The 3COM system we're using isn't supported any longer and has issues with NAT traversal. One thing we also did was purchase an InGate Siperator so that our future SIP provider traffic will not pass through the PA-500 and instead will be parallel to the firewall. Managed to find a hardly-used unit on Ebay for way less than retail price.
... View more
06-05-2012
01:15 PM
Unfortunately, our old 3COM VCX doesn't have all those fancy options.. I'm anticipating our switch to NEC Spherical in the near future.. Until then, I'm stuck trying to fiddle with App Override and NAT rules. I've been working with Palo Alto for a few weeks now and we've still have no luck getting audio to enter the network from outside the firewall. Audio has no problem exiting, though.
... View more
06-05-2012
08:11 AM
I'd also really like to know how you got past this. Facing an identical issue and I'm at a loss.
... View more
06-04-2012
07:06 AM
Packet capture on a laptop running a SIP client shows that packets are being received on the external unit, but packets are hitting the NAT and being dropped when trying to re-enter the network. PBX has a static NAT to an external IP. External unit registers via PBX external. External unit makes call. PBX connects to internal phone and sets up the call. Internal phone takes the call and tries to communicate with external unit via default dynamic-port-and-ip NAT (different IP than PBX external). Traffic flows from internal to external via default NAT, but not vice versa. The issue is that the traffic cannot re-enter the network via the dynamic-port-and-ip NAT. Our old Juniper SRX-240B did not have this issue, as it would route all SIP traffic back out the PBX external IP in it's default behavior (from what I've been told). This would utilize the static NAT and not the dynamic NAT. Still working with someone from Palo Alto..
... View more
05-31-2012
08:12 AM
An update to this ticket: I've been working with Palo Alto support and still no fix, yet. Packet captures show that RTP traffic is flowing from the internal phone to the SIP phone outside the network, but there is no flow from outside to inside. It is passing out of our dynamic-ip-and-port NAT rule, but cannot find a way back in. Still waiting on support for additional testing.
... View more
05-04-2012
11:40 AM
Our PA-500 is currently on version 4.1.2. Packet captures that I've done so far show outgoing RTP transmission, but no incoming. CASE#: 00076638
... View more
05-04-2012
10:25 AM
Any Palo-Alto support people that can make any suggestions at all? We really want to avoid having to buy an intermediate device for SIP to bypass the PA-500.
... View more
05-01-2012
12:10 PM
I have our VoIP PBX set up with an IP on our external side via NAT. The policy is a simple static NAT from the internal IP to the external. I also have the correct security policies in place to allow SIP/RTP traffic to pass freely to and from the external IP address. The PBX server can be accessed via HTTP from outside our network, and my cell phone (using BRIA) can successfully register to the PBX. However, whenever I make a call from outside, it will disconnect after seven (7) seconds when picked up. This happens every time without fail. I have tried tweaking around security policies, enabling application override, and altering the NAT rules.. nothing seems to help. Can anyone give me suggestions? This setup worked perfectly fine on our old Juniper SRX-240B with the PA-500 in vWire. Ever since I swapped the PA-500 into being our gateway/firewall, it just won't do it. More information can be provided upon request. Thanks, Logan
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-30-2016
04:20 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks