Checkpoint Office@safe 500 SIP Issues

[Pepp77]

Having a bit of a problem with a new SIP installation. This is with voiceflex so uses registration authentication.

The issue we are having is that we are able to register but instead of registering on port 5060 the firewall is changing the port randomly to anything from 27000-48000 which then means when we try to make a call we can for the first 60 seconds or so after registration and then after that it is being rejected by voiceflex as not coming to them on the correct port.

We have looked for the usual SIP ALG and H323 inspection settings and can find none.

Currently we are trying to do this with STUN (which shows the port number changing each time) we are going to reboot tonight and try without STUN because at the moment if we try to add any forwarding rules to the firewall it just stops the SIP registering entirely.

Sorry to waffle but basically what I am asking is has anyone got any experience with this firewall and SIP.

Thanks

| ACSS SME |

 

[hairlessupportmonkey]

Your NAT / firewall rule isnt configured correctly. Its been a long time since I did a S@O but if you have support with checkpoint I highly recommend you speak to them to resolve.

ACSS - SME
General Geek

 

[IPOLackey]

Hi Pepp,

There isn't much to do with the IPO. The only thing I'd suggest checking from your description is that Re-Invite Support is ticked.

It does seem like some sort of SIP ALG issue. If you know the router model then you can find the command to disable SIP ALG.