Hello
We have an XG106 running 17.5 MR7.
The XG is used specifically as our SIP gateway, we spent many weeks configuring and testing it before going live with it on Tuesday 8th October. Per our providers request, we have disabled SIP ALG & change the UDP timeout to 45 seconds.
It has worked without issue until this morning when all incoming/outgoing calls stopped working. I took a quick look at the XG and it seemed fine, all interfaces up and I could ping outbound.
I raised a ticket with our SIP trunk provider who said that the traffic was being dropped at our gateway, I restarted the XG and calls began to work again.
Upon further investigation it seems that the IPS was triggered with rule "PROTOCOL-VOIP inbound 404 Not Found" at the time the calls stopped. The source of the attack was our Service Proivder's router so I'm assuming this was a false-positive.
In either firewall rule I have for VoIP calls, Intrusion Prevention is turned off.
> Do I need to turn it off elsewhere/how can I stop the IPS doing that again?
> If it does it again, is there a quicker way than rebooting the device to fix the problem?
> What does "PROTOCOL-VOIP inbound 404 Not Found" mean?
Many thanks
Paul
This thread was automatically locked due to age.
