MP4 files through a firewall?

[yltracy]

We are attempting to stream MP4 through an ASA 5520 running version 8.1.  The RTSP handshake takes place and I can see the teardown when the connection is terminated, but the files themselves never show up at the end device.  I don't see any blocking messages.  This same stream works fine if sent to a device that is not behind the firewall.

Any ideas what can be happening?

[August Ritchie]

Can you get the outputs of "show service-policy"

[yltracy]

show service-policy

Global policy:

Service-policy: global_policy

Class-map: inspection_default

Inspect: dns preset_dns_map, packet 6065793, drop 607, reset-drop 0

Inspect: ftp, packet 58530, drop 0, reset-drop 0

Inspect: h323 h225 defaulth323_map, packet 141, drop 0, reset-drop 0

tcp-proxy: bytes in buffer 0, bytes dropped 0

Inspect: h323 ras defaulth323_map, packet 0, drop 0, reset-drop 0

Inspect: rsh, packet 141, drop 0, reset-drop 0

Inspect: rtsp, packet 48673, drop 0, reset-drop 0

tcp-proxy: bytes in buffer 0, bytes dropped 0

Inspect: esmtp defaultesmtp_map, packet 549857, drop 0, reset-drop 0

Inspect: skinny , packet 141, drop 0, reset-drop 0

tcp-proxy: bytes in buffer 0, bytes dropped 0

Inspect: sunrpc, packet 449, drop 0, reset-drop 0

tcp-proxy: bytes in buffer 0, bytes dropped 0

Inspect: xdmcp, packet 187, drop 187, reset-drop 0

Inspect: sip , packet 276, drop 0, reset-drop 0

tcp-proxy: bytes in buffer 0, bytes dropped 0

Inspect: netbios, packet 11882432, drop 0, reset-drop 0

Inspect: tftp, packet 155696, drop 0, reset-drop 0

Interface CITYNET:

Service-policy: CITYpolicy

Class-map: CITYNET-class

IPS: card status Up, mode promiscuous fail-open

packet input 0, packet output 2845528630, drop 0, reset-drop 0

[August Ritchie]

Hmm, what interface are you trying it from? Can you plug in a PC into an open test interface and try the transfer from there?

[yltracy]

It's from the 156.74.104.5 interface. I don't have physical access to this device, which makes it difficult to attempt a direct connection.

[Panos Kampanakis]

Also if it a 5520 check if it has a CSC module in it and if the module is blocking streaming media.

I hope it helps.

PK