Basic Configuration

VoIP in SmartDashboard

VoIP in SmartDashboard is configured in two places:

• On the Firewall tab

  Use the Firewall tab to configure:

  • Security rules for VoIP traffic
  • Host and Network objects for VoIP Endpoints and Servers
  • NAT on VoIP Endpoint and Server objects
• On the IPS tab

  Use the IPS tab to:

  • Configure VoIP Engine settings for each protocol (SIP, H.323, MGCP and SCCP)
  • Apply VoIP IPS protections

  IPS tab > Protections > By Protocol > IPS Software Blade > Application Intelligence > VoIP

Basic Configuration Workflow

This section describes the workflow for a basic SIP configuration.

We assume:

• You have installed a Security Gateway and Security Management Server.
• The VoIP phones in the external networks are:
  • Not behind a NAT device or
  • Behind a NAT device that is VoIP-aware

To configure VoIP:

1. Log in to SmartDashboard.
2. Define the Security Gateway.
3. Define the VoIP server.
4. Define the VoIP endpoints.
5. Define a VoIP security rule.
6. Install the Security Policy.
7. Test the configuration.

Defining the SIP Server

To define a SIP server (also known as a SIP Proxy or a Registrar) use the regular Host object in:

SmartDashboard > Network Objects > New > Check Point > Host...

For example, name the host: sip_server_host.

Defining the SIP Endpoints

Define the internal VoIP phones (endpoints) by:

• Defining networks or host objects or
• A group of hosts and network objects

For example, a group of internal networks might be named: internal_net.

Defining the Security Rule

Configure a simple security rule that allows traffic between endpoints on the internal network and the SIP server in the external network.

1. Click the Security tab.
2. Add this rule:

1. Install the policy.

Testing the Configuration

Test the configuration by making phone calls from an:

• Internal phone to an internal phone.
• Internal phone to an external phone.
• External phone to an internal phone.

After making each call, see the resulting logs in SmartView Tracker.

To see the VoIP logs:

1. From the SmartDashboard File menu, select Window > SmartView Tracker.

   SmartView Tracker opens.

2. Under the Predefined queries, select the Firewall Blade > Voice over IP > Call Session filter.
3. Examine the resulting logs.

Typical Call Session VoIP log

The Figure shows a typical Call Session VoIP log for a successful call from an internal phone to an external one.

• See the Call Direction field in the Record Details window of the log. The call is from Source IP-phone 6666 to Destination IP-phone 4444.
• The Source IP-phone and Destination IP-phone fields show the phone extension (the user).
• The Source and Destination fields show the connection though the gateway.

  For example, if the internal phone makes a connection to the SIP Server:

  • The Source field shows the internal_phone_host node
  • The Destination field shows the sip_server_host node