This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cisco phones not registering with the SIP server after upgrade from Cyberoam to Sophos OS

Hello,

 

I have a Cyberoam firewall which i recently upgraded its firmware from Cyberoam firmware to Sophos firmware. After my upgrade, the Cisco phones couldn't register to the SIP server located at a remote location.

I have done every configurations and check all the rules, they seem Okay but the IP phones are not just connecting to the SIP server

Is there a particular port Cisco phones use to communicate with the SIP server which i have to allow? Or has anyone experienced this before?

 

Awaiting kind response.



This thread was automatically locked due to age.
Parents Reply
  • Hello, I have unload and reload the SIP helper but still same. 

    Please note that the Polycom IP phones on the network are good. But the issue we are having is with the Cisco phones.

    I dont know if Cisco phones work on any particular port which i have to allow.. Just asking...

Children
  • We cannot give you any information about cisco phones. Maybe you look up the manual for the Cisco phones for such kind of information. 

    As far as i can assume, maybe you need to have a firewall policy for the phones. 

  • Hi 

    I think that somemething is interfering on SIP/RTP traffic.

    1 - Is there an IPS policy enabled on the firewall rules created for traffic between those networks ?

    2 - Is UDP flood enabled under Intrusion Prevention? (This is global).

    3 - Try to disable MicroApp discovery. If it is already off, please try turning on and off again with the following commands from the console:

    - console> system application_classification microapp-discovery show
    - console> system application_classification microapp-discovery on
    - console> system application_classification microapp-discovery off

    4. Last year I had a similar problem that was resolved by disabling two IPS features with the commands below:

    - console> set ips sip_ignore_call_channel disable

    - console> set ips sip_preproc disable

    I hope it helps.

    Rodrigo