Configure ASA around CallManager

Unanswered Question
Jun 8th, 2010

We have our Voice and Data Vlan segregated by an ASA Firewall. The CallManager sits within the Voice Vlan. The IPT Solution reference network Design Document says;

"By placing a firewall between the Cisco CallManager cluster and both the voice and data networks, you greatly reduce the exposure of the most critical component in the Cisco AVVID network, the call processing agent. The firewall acts as a guardian between all IP devices and the Cisco CallManagers,

ensuring that only specific transactions are allowed."

I'm trying to find a document or  configure example so that I can configure the ASA to implement this security design.

Can anyone provide a reference?

thks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 2 (1 ratings)
Loading.
Marcin Latosiewicz Tue, 06/08/2010 - 10:35

Alan,

I guess what the document states is ASA's layer 7 inspection engines (in case of call manager, SIP, SCCP and H323).

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/inspect_voicevideo.html

There are also some unified communication features:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/unified_comm_overview.html

Hope this helps.

Marcin

renji joy Tue, 01/06/2015 - 22:45

Thanks for your quick support,

we will do the same and let to you know

If we required any extra license for the jabber android..

Actions

This Discussion