cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
288
Views
0
Helpful
4
Replies

VCS-E talking to itself

Eli Kagan
Level 1
Level 1

I have a 3 legged firewall config, with VCS-E sitting in a DMZ with only one interface connected and firewall doing all the NAT. VCS-E has the NAT option configured on its interface as well.

All works ok, but sometimes I see SIP traffic from VCS-E private IP address to its public IP address. The firewall thinks that this is an attack and blocks it. 

What's the reason for VCS-E to talk to itself in the first place?

 

Thanks,

Eli

4 Replies 4

Wayne DeNardi
VIP Alumni
VIP Alumni

Have you correctly followed all the guides about setting up a VCS-Expressway in a DMZ?

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.

 

Wayne
--
Please remember to mark helpful responses and to set your question as answered if appropriate.

Of course I have.

Great.  That's not always the case, so always worth checking.

Can you provide some more information on your issue, such as which versions of software you are running, a capture of the call logs from the VCS for one of the odd calls, and perhaps an overview of your search rules.

If we can see the call, and the search path it's taking, it may be easier to identify why it appears to be calling itself.

Are the calls being blocked actually calls between your devices, or are they from external devices, or perhaps something like a SIPVicious scan?

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.

Wayne
--
Please remember to mark helpful responses and to set your question as answered if appropriate.

According to Cisco tech support this is the correct behaviour for this kind of setup. I can't wrap my head around it but if they say so I'll let it be.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: