Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Supporting STUN for FaceTime

Hi, all

My customer wants to communicate by FaceTime of iPAD on the inside and the outside of the company.
In the customer's environment ,the firewall is configrued NAT for the network communication from the inside to the outside.
On the other hand, the FaceTime protocol is using STUN(Simple Traversal of UDP through NATs) on the base.

About STUN:

The FaceTime application automatically negotiates the required NAT and firewall traversal using Apple's servers(public).
This involves STUN techniques that allow the Apple servers to identify the internal/external address combination that will be able to reach the device.

So the NAT router or NAT firewall must supports STUN.

This means that when transmitting a packet outside from an IP address & port number with an inner side,
the IP address & port number assigned outside always makes it the same.

When the customer tested FaceTime in the customer's environment, it's communication was not able to be started.
The cause was because the customer's NAT firewall(not cisco) is not supporting STUN.

So we considered the replacement of the firewall.
Now, would you tell me whether Cisco ASA support STUN ?

Toshihiko Ito

Everyone's tags (4)
CreatePlease login to create content