UC500 Behind Firewall

Unanswered Question
Apr 1st, 2010

Is there a lab that demonstrates how to setup a UC520/540 behind an SA520.  As well is there one that deals with third party firewalls like SonicWALL.  If find most customers will have an existing firewall to work with.


I have this problem too.
1 vote
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ciscojoe837 Thu, 04/01/2010 - 13:48

Thanks for that.  It doesn't mention anything about adding a static route.  I read another doc that said something about having to add a static route, which I was confused on.

Is there also a lab on the ASA5505 put in front since it doesn't have the CCA but similar to the SA520?

Finally, I've never seen a SIP ALG feature on any firewall.  How can you tell if a firewall is ALG-aware?

Thanks again.

David Hornstein Thu, 04/01/2010 - 15:10

Hi ciscojoe,

If you want clarification regarding presence of SIP ALG refer to the administrator guide of the SA520 , But for the sake of saving you some time.


There are numerous references to the SIP ALG in the Administrators guide, but page 147 states "

SIP ALG (Session Initiation Protocol Application-level gateway) can rewrite information within the SIP messages (SIP headers and SDP body) to make signaling and audio traffic between the client behind NAT and the SIP endpoint possible.

Note  SIP-ALG should be enabled when voice devices such as the UC 500 or SIP phones are connected to the network behind the security appliance."


If you are interested in checking out some free training on the ASA5505  try the following URL;


hope this helps.

regards Dave