SRX Services Gateway
SRX Services Gateway

Does SRX support ALG for SIP, SCCP, H323?

02.29.12   |  
‎02-29-2012 07:40 AM

Hi All,

 

Does SRX support ALG for SIP, SCCP, H323?

Thanks!

Michael
JNCIA-JUNOS, JNCIS-ENT/SEC, JNCIP-ENT
(CCNA, ACMP, ACFE, CISE)
"http://www.thechampioncommunity.com/"
CONNECT EVERYTHING. EMPOWER EVERYONE.
Share & Learn. Knowledge is Power.

"If there's a will, there's a way!"
7 REPLIES
SRX Services Gateway

Re: Does SRX support ALG for SIP, SCCP, H323?

02.29.12   |  
‎02-29-2012 09:24 AM

Yes:

 

user@srx> show security alg status
ALG Status :
  DNS      : Enabled
  FTP      : Enabled
  H323     : Enabled
  MGCP     : Enabled
  MSRPC    : Enabled
  PPTP     : Enabled
  RSH      : Enabled
  RTSP     : Enabled
  SCCP     : Enabled
  SIP      : Enabled
  SQL      : Enabled
  SUNRPC   : Enabled
  TALK     : Enabled
  TFTP     : Enabled
  IKE-ESP  : Disabled

 

 

http://www.juniper.net/techpubs/en_US/junos10.4/topics/concept/alg-security-sip-understanding.html

MMcD [JNCIP-SEC, JNCIS-ENT, CCNA, MCP]
____________________________________________________

[Please Mark My Solution Accepted if it Helped, Kudos are Appreciated Too]
SRX Services Gateway

Re: Does SRX support ALG for SIP, SCCP, H323?

02.29.12   |  
‎02-29-2012 12:08 PM

True but the alg's on high-end series are often behind in development with the branch devices. So check the documentention for the right model or check with show security alg ststus as MMcD did.  

best regards,

Screenie.
Juniper Ambassador,
JNCIA IDP AC WX JNCIS FW SSL JNCIP SEC ENT SP JNCI

If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
SRX Services Gateway

Re: Does SRX support ALG for SIP, SCCP, H323?

03.01.12   |  
‎03-01-2012 02:47 AM

Hi,

 

What is model of SRX and Junos version you are using.

 

 


Highlighted
SRX Services Gateway

Re: Does SRX support ALG for SIP, SCCP, H323?

03.01.12   |  
‎03-01-2012 06:53 AM
I am looking at 10.4R8.5... and somewhere ard 11.x firmware?
Thanks!

Michael
JNCIA-JUNOS, JNCIS-ENT/SEC, JNCIP-ENT
(CCNA, ACMP, ACFE, CISE)
"http://www.thechampioncommunity.com/"
CONNECT EVERYTHING. EMPOWER EVERYONE.
Share & Learn. Knowledge is Power.

"If there's a will, there's a way!"
SRX Services Gateway

Re: Does SRX support ALG for SIP, SCCP, H323?

03.02.12   |  
‎03-02-2012 01:37 AM

JUNOS Software Release 11.4R1.6 shows exactly the same list!

 

Brgs,

 

Maarten

SRX Services Gateway

Re: Does SRX support ALG for SIP, SCCP, H323?

[ Edited ]
07.06.13   |  
‎07-06-2013 01:49 AM

how to configure sip?, i tried to configure sip on juniper srx 100 but i am not sure about my configurations... can u help me?

SRX Services Gateway

Re: Does SRX support ALG for SIP, SCCP, H323?

07.06.13   |  
‎07-06-2013 11:26 PM

This about the ALG that supports SIP. With your VoIP calls goig through the SRX, it needs to open a pinhole for the port used by the application on the return traffic. That is what the ALG is all about, dynamically opening and closing ports when required by applications, so you do not have to do it yourself...an excercise in futility if you ask.

Now here is a link with all you need to know about SIP and configuring SIP on the SRX. Be sure to scroll all the way to the bottom and all the information and explanation you need is covered here.

[KUDOS PLEASE! If you think I earned it!
If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]