Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VCS-E talking to itself

I have a 3 legged firewall config, with VCS-E sitting in a DMZ with only one interface connected and firewall doing all the NAT. VCS-E has the NAT option configured on its interface as well.

All works ok, but sometimes I see SIP traffic from VCS-E private IP address to its public IP address. The firewall thinks that this is an attack and blocks it. 

What's the reason for VCS-E to talk to itself in the first place?

 

Thanks,

Eli

Everyone's tags (1)
4 REPLIES
VIP Green

Have you correctly followed

Have you correctly followed all the guides about setting up a VCS-Expressway in a DMZ?

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.

 

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.
New Member

Of course I have.

Of course I have.

VIP Green

Great.  That's not always the

Great.  That's not always the case, so always worth checking.

Can you provide some more information on your issue, such as which versions of software you are running, a capture of the call logs from the VCS for one of the odd calls, and perhaps an overview of your search rules.

If we can see the call, and the search path it's taking, it may be easier to identify why it appears to be calling itself.

Are the calls being blocked actually calls between your devices, or are they from external devices, or perhaps something like a SIPVicious scan?

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.
New Member

According to Cisco tech

According to Cisco tech support this is the correct behaviour for this kind of setup. I can't wrap my head around it but if they say so I'll let it be.

90
Views
0
Helpful
4
Replies
CreatePlease to create content