Plugging Up SIP Ports

[AJAZ NAWAZ]

We have a SIP trunk coming in over our internet feed. A scan has revealed TCP5060 being used for this service. I suspect SIP require additional ports to be available for RTP streams etc. Does anyone out there have a security policy solution/configuration to implement on ASA for this, or is there a fixup?.

thanks

Ajaz

[Kureli Sankar]

inspect sip should take care of this.

You can read here: http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i2.html#wp1743169

-KS