Install guide

78 Firewall Enhancements Release Note
Software Version 2.9.1
C613-10486-00 REV C
Example To enable the SIP ALG to automatically manage SIP clients on the private
network, allowing a maximum of 50 SIP clients, use the command:
set fire sipa mod=auto maxa=50
MULTIservers How the SIP ALG interacts with sessions initiated to and from SIP
Proxy Servers that are independent of the SIP Registrar. An
independent proxy server does not have the same IP or port details as
the SIP Registrar.
This parameter is only valid when mode is set to automatic.
Default: no
OUTOnly Sessions sent by a SIP client to independent proxy
servers are matched to the original session created
between the SIP client and the SIP Registrar. If NAT is
configured, then the translation is the same as the
original session between the SIP client and the
registrar. However, calls sent by proxy servers that do
not have an existing session with the SIP client and do
not have a matching allow rule are dropped.
False, NO,
OFF
A new firewall session is created for any calls to an
independent proxy server that the SIP client makes. If
NAT is configured, the translation does not match the
original session created between the SIP client and
the SIP Registrar. If no session currently exists
between the proxy server and the SIP client and there
is no matching allow rule for the server, any calls sent
by the proxy server are dropped.
ON, True,
YES
Sessions sent and received from independent proxy
servers are matched to the original session created
between the SIP client and the SIP Registrar. If NAT is
configured, then the translation is the same as the
original session between the SIP client and the
registrar. Calls from proxy servers that match the IP
and port details the client has registered with the SIP
Registrar are allowed through the firewall.
Parameter (cont.) Description (cont.)