10-20-2010 02:26 AM
In this release, for a wan-link with no NAT and any/any/any rules,
you need to disable H323 for LifeSize,
and enable SIP for IP-phones.
04-15-2011 01:29 PM
We have Polycom here trying to connect to multiple endpoints in multiple networks through SRXs at the edge and have the same problem. We are running 10.2R3 on all of the SRXs. The only way we've made it limp along is to disable h.323 but that doesn't completely solve the problem. We still drop calls, content and sometimes can't even connect. We've done call tracerouting and proved that many of our issues are related to one way traffic.
What is the word from Juniper on this? This has been a known issue for a while and needs to be fixed ASAP. I'd even settle for a work around that isn't "disable h.323 inspection" because that doesn't really work either. Many people have complained here and with just about every major VC system so this really rests on Juniper to address. Can we get some usefule info please?
08-23-2011 02:23 PM
Nearly all the big H323 implementations implement extentions that do not work with ALGs.
Almost all Tandberg documentation states to NOT use ANY kind of Application gateway witht their products.
Also for future not:
- Many of the ALGs block by default and require you to configure them in some way to be used. Dissable any you have not read the documentation for.
- Read the release notes when upgrading between releases... every .x release contains new features... NEW ALGs are always a possiblity and firewalls block by default.