Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VideoConference over IP

Hello All,

i'm not sure that i'm posting on the right place, but if not let me know.

The question is:

We are planning to put videoconference over ip and we are using a Tandberg solution, to use the video over ip we would need a transversal firewall.

Tandberg has the VCS Expressway as a solution and claim that the H.460 protocol does the port openning in a dynamic way.

But i would like to know if I can use ASA as the firewall solution for the Video Conference over ip. Tandberg says that i can use ASA but need to open 8 to 16 TCP/UDP ports for video and the H.460 does this automatically.

But i read that the ALG (Application Layer Gateways) used in ASA could do the same of the H.460, that is right? Can i use ASA istead of Tandberg VCS Expressway?

Thanks in advance.

Cisco Employee

Re: VideoConference over IP

ASA acts as a ALG and supports H.323 based video conferencing. A combination of CUBE (Cisco Unified Border Element) and ASA can be used to allow incoming and outgoing calls. We will need to allow traffic for H.225 signaling (port 1720) and RAS (port 1719) between CUBE and ASA. ASA inspects the signaling messages and opens ports for H.245 signaling, audio and video streams.

Few documents for your reference :

Firewall and NAT section in Video Conferencing SRND

A configuration example of a similar topology

Configuring Inspection of Voice and Video Protocols (ASA Config Guide)

Difference between Tandberg VCS Expressway and alternative solutions