Solved: h.323 conversation

jwilder · ‎03-25-2008

Hello, I am looking for help on configuring the h.323 inspection rules on a ASA5520. I have a h.323 device on my inside network that moves around and i would like to create a rules that allow h.323 traffic to specific outside devices. Can anyone help me out with this configuration? Thanks!

didyap · ‎03-31-2008

You must permit traffic for the well-known H.323 port 1720 for the H.225 call signaling; however, the H.245 signaling ports will be negotiated between the endpoints in the H.225 signaling. Also note that the security appliance does not support TCP options in the Proxy ACK for the TPKT. Following link may help you

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/inspect.html#wp1229306

View solution in original post

didyap · ‎03-31-2008

You must permit traffic for the well-known H.323 port 1720 for the H.225 call signaling; however, the H.245 signaling ports will be negotiated between the endpoints in the H.225 signaling. Also note that the security appliance does not support TCP options in the Proxy ACK for the TPKT. Following link may help you

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/inspect.html#wp1229306