Cisco Asdm 7 User Guide

 
12-5
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  H.323 Inspection
Not supported with dynamic NAT or PAT.
Not supported with extended PAT.
Not supported with NAT between same-security-level interfaces.
Not supported with outside NAT.
Not supported with NAT64.
When a NetMeeting client registers with an H.323 gatekeeper and tries to call an H.323 gateway that 
is also registered with the H.323 gatekeeper, the connection is...

 
12-6
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  H.323 Inspection
Edit—Edits an H.323 class map.
Delete—Deletes an H.323 class map.
Add/Edit H.323 Traffic Class Map
Configuration > Global Objects > Class Maps > H.323 > Add/Edit H.323 Traffic Class Map
The Add/Edit H.323 Traffic Class Map dialog box lets you define a H.323 class map.
Fields
Name—Enter the name of the H.323 class map, up to 40 characters in length....

 
12-7
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  H.323 Inspection
–Regular Expression Class—Lists the defined regular expression classes to match.
–Manage—Opens the Manage Regular Expression Class dialog box, which lets you configure 
regular expression class maps.
Media Type Criterion Values—Specifies which media type to match.
–Audio—Match audio type.
–Video—Match video type.
–Data—Match data type.
H.323 Inspect Map...

 
12-8
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  H.323 Inspection
Call Party Number Enabled
Call duration Limit 1:00:00
RTP conformance enforced
Limit payload to audio or video, based on the signaling exchange: yes
–Phone Number Filtering—Opens the Phone Number Filtering dialog box to configure phone 
number filters.
–Customize—Opens the Add/Edit H.323 Policy Map dialog box for additional settings.
–Default Level—Sets the...

 
12-9
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  H.323 Inspection
Call Party Number Disabled
Call duration Limit Disabled
RTP conformance not enforced
–Medium
State Checking h225 Enabled
State Checking ras Enabled
Call Party Number Disabled
Call duration Limit Disabled
RTP conformance enforced
Limit payload to audio or video, based on the signaling exchange: no
–High
State Checking h225 Enabled
State Checking ras Enabled...

 
12-10
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  H.323 Inspection
NoteYou can enable call setup between H.323 endpoints when the Gatekeeper is inside the 
network. The ASA includes options to open pinholes for calls based on the 
RegistrationRequest/RegistrationConfirm (RRQ/RCF) messages. Because these RRQ/RCF 
messages are sent to and from the Gatekeeper, the calling endpoints IP address is unknown 
and the ASA opens a...

 
12-11
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  H.323 Inspection
Add/Edit HSI Group
Configuration > Global Objects  > Inspect Maps > H323 > H323 Inspect Map > Advanced View > 
Add/Edit HSI Group
The Add/Edit HSI Group dialog box lets you configure HSI Groups.
Fields
Group ID—Enter the HSI group ID.
IP Address—Enter the HSI IP address.
Endpoints—Lets you configure the IP address and interface of the endpoints.
–IP...

 
12-12
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  MGCP Inspection
–Regular Expression Class—Lists the defined regular expression classes to match.
–Manage—Opens the Manage Regular Expression Class dialog box, which lets you configure 
regular expression class maps.
Media Type Criterion Values—Specifies which media type to match.
–Audio—Match audio type.
–Video—Match video type.
–Data—Match data type.
Multiple...

 
12-13
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  MGCP Inspection
NoteTo avoid policy failure when upgrading from ASA version 7.1, all layer 7 and layer 3 policies must have 
distinct names. For instance, a previously configured policy map with the same name as a previously 
configured MGCP map must be changed before the upgrade.
MGCP messages are transmitted over UDP. A response is sent back to the source address (IP...

 
12-14
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  MGCP Inspection
RestartInProgress
The first four commands are sent by the call agent to the gateway. The Notify command is sent by the 
gateway to the call agent. The gateway may also send a DeleteConnection. The registration of the MGCP 
gateway with the call agent is achieved by the RestartInProgress command. The AuditEndpoint and the 
AuditConnection commands are sent by...