VOIP disable SIP ALG and NAT time-out

Looks like the commands are still the same in v18

https://community.sophos.com/kb/en-us/123523

https://community.sophos.com/kb/en-us/127785

https://community.sophos.com/kb/en-us/131754

Sorry, your commands did not work.

The VOIP phone did still not get all settings.

If there is no other solution I will get back to EAP1 and hope also Packet Capture is working again.

For disabling SIP is there also a permanent solution?

Hi Sop,

The XG has no really further SIP manipulation systems than unloading the SIP ALG in the console.

If you are having problems with the phones not pulling settings, make sure you have a firewall rule with no filtering for the appropriate targets.

The XG will primarily cause issues with SIP quality (if SIP ALG is unloaded) whereas total inability to download or retrieve settings is likely to be firewall rules related.

Emile

I went back on EAP1-Refresh1 and VOIP settings are loading fine.

With EAP2 I did some TCPDUMP's but could not see any error, if someone at Sophos is interested in TCPDUMP I can send them.

With EAP1-refresh1 I did not change SIP or NAT time-out, they are on default settings.

These are my Firewall and NAT settings

The NAT settings are linked and I use different WAN IP (translated source)

What exactly are the issues you're facing with VoIP?

Are you having trouble with phones not being able to make calls or are they not provisioning correctly? That's two VERY different things. The configuration is pulled from the boot server often via HTTP(s)/FTP while SIP and RTP are used when the phone is making calls.

"system system_modules sip unload" will permanently disable SIP on the XG. I won't automatically re-enable itself.

Are you applying any IPS/Web Filtering/Application Filtering/SSL&TLS Decryption to this traffic? If so, please check the logs for each and post the settings.

What exactly are the issues you're facing with VoIP?

Are you having trouble with phones not being able to make calls or are they not provisioning correctly? That's two VERY different things. The configuration is pulled from the boot server often via HTTP(s)/FTP while SIP and RTP are used when the phone is making calls.

"system system_modules sip unload" will permanently disable SIP on the XG. I won't automatically re-enable itself.

Are you applying any IPS/Web Filtering/Application Filtering/SSL&TLS Decryption to this traffic? If so, please check the logs for each and post the settings.