VideoConference over IP

[Rafael Chavantes]

Hello All,

i'm not sure that i'm posting on the right place, but if not let me know.

The question is:

We are planning to put videoconference over ip and we are using a Tandberg solution, to use the video over ip we would need a transversal firewall.

Tandberg has the VCS Expressway as a solution and claim that the H.460 protocol does the port openning in a dynamic way.

But i would like to know if I can use ASA as the firewall solution for the Video Conference over ip. Tandberg says that i can use ASA but need to open 8 to 16 TCP/UDP ports for video and the H.460 does this automatically.

But i read that the ALG (Application Layer Gateways) used in ASA could do the same of the H.460, that is right? Can i use ASA istead of Tandberg VCS Expressway?

Thanks in advance.

[carunach]

ASA acts as a ALG and supports H.323 based video conferencing. A combination of CUBE (Cisco Unified Border Element) and ASA can be used to allow incoming and outgoing calls. We will need to allow traffic for H.225 signaling (port 1720) and RAS (port 1719) between CUBE and ASA. ASA inspects the signaling messages and opens ports for H.245 signaling, audio and video streams.

Few documents for your reference :

Firewall and NAT section in Video Conferencing SRND

http://www.cisco.com/en/US/docs/video/cuvc/design/guides/srnd/vidcompo.html#wp1041158

A configuration example of a similar topology

http://www.cisco.com/en/US/products/sw/voicesw/ps5640/products_configuration_example09186a0080b091e2.shtml

Configuring Inspection of Voice and Video Protocols (ASA Config Guide)

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/inspect_voicevideo.html#wp1228437

Difference between Tandberg VCS Expressway and alternative solutions

http://www.tandberg.com/collateral/white_papers/tandberg_enabling_end-to-end_ip.pdf