SRX Services Gateway
Reply
Trusted Contributor
michael.saw
Posts: 1,048
Registered: ‎09-26-2011
0

Does SRX support ALG for SIP, SCCP, H323?

Hi All,

 

Does SRX support ALG for SIP, SCCP, H323?

Thanks!

Michael
JNCIA-JUNOS, JNCIS-ENT/SEC, JNCIP-ENT
(CCNA, ACMP, ACFE, CISE)
"http://www.thechampioncommunity.com/"
CONNECT EVERYTHING. EMPOWER EVERYONE.
Share & Learn. Knowledge is Power.

"If there's a will, there's a way!"
Distinguished Expert
MMcD
Posts: 628
Registered: ‎07-20-2010
0

Re: Does SRX support ALG for SIP, SCCP, H323?

Yes:

 

user@srx> show security alg status
ALG Status :
  DNS      : Enabled
  FTP      : Enabled
  H323     : Enabled
  MGCP     : Enabled
  MSRPC    : Enabled
  PPTP     : Enabled
  RSH      : Enabled
  RTSP     : Enabled
  SCCP     : Enabled
  SIP      : Enabled
  SQL      : Enabled
  SUNRPC   : Enabled
  TALK     : Enabled
  TFTP     : Enabled
  IKE-ESP  : Disabled

 

 

http://www.juniper.net/techpubs/en_US/junos10.4/topics/concept/alg-security-sip-understanding.html

MMcD [JNCIP-SEC, JNCIS-ENT, CCNA, MCP]
____________________________________________________

[Please Mark My Solution Accepted if it Helped, Kudos are Appreciated Too]
Distinguished Expert
Screenie
Posts: 1,076
Registered: ‎01-10-2008
0

Re: Does SRX support ALG for SIP, SCCP, H323?

True but the alg's on high-end series are often behind in development with the branch devices. So check the documentention for the right model or check with show security alg ststus as MMcD did.  

best regards,

Screenie.
Juniper Ambassador,
JNCIA IDP AC WX JNCIS FW SSL JNCIP SEC ENT SP JNCI

If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
Contributor
hmehmood
Posts: 33
Registered: ‎08-26-2011
0

Re: Does SRX support ALG for SIP, SCCP, H323?

Hi,

 

What is model of SRX and Junos version you are using.

 

 


Trusted Contributor
michael.saw
Posts: 1,048
Registered: ‎09-26-2011
0

Re: Does SRX support ALG for SIP, SCCP, H323?

I am looking at 10.4R8.5... and somewhere ard 11.x firmware?
Thanks!

Michael
JNCIA-JUNOS, JNCIS-ENT/SEC, JNCIP-ENT
(CCNA, ACMP, ACFE, CISE)
"http://www.thechampioncommunity.com/"
CONNECT EVERYTHING. EMPOWER EVERYONE.
Share & Learn. Knowledge is Power.

"If there's a will, there's a way!"
Trusted Contributor
MvdH25
Posts: 29
Registered: ‎06-13-2008

Re: Does SRX support ALG for SIP, SCCP, H323?

JUNOS Software Release 11.4R1.6 shows exactly the same list!

 

Brgs,

 

Maarten

Contributor
Abhinath
Posts: 17
Registered: ‎07-01-2013
0

Re: Does SRX support ALG for SIP, SCCP, H323?

[ Edited ]

how to configure sip?, i tried to configure sip on juniper srx 100 but i am not sure about my configurations... can u help me?

Distinguished Expert
lyndidon
Posts: 1,280
Registered: ‎06-06-2011
0

Re: Does SRX support ALG for SIP, SCCP, H323?

This about the ALG that supports SIP. With your VoIP calls goig through the SRX, it needs to open a pinhole for the port used by the application on the return traffic. That is what the ALG is all about, dynamically opening and closing ports when required by applications, so you do not have to do it yourself...an excercise in futility if you ask.

Now here is a link with all you need to know about SIP and configuring SIP on the SRX. Be sure to scroll all the way to the bottom and all the information and explanation you need is covered here.

[Click the "Star" for Kudos if you think I earned it!
If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.