ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

Need help disabling SIP ALG on three legacy ScreenOS firewalls

‎08-01-2019 10:01 AM

We're in the process of deploying a cloud-hosted VoIP system (Metaswitch) across our enterprise (14 locations).  For it to work correctly the only change required on our part is to disable SIP ALG.

 

At most of our locations this has been super easy, just unchecking the box in Security->ALG and everything works.  However, we have some older devices that do not have this option.

 

How do we disable SIP on these devices?

NetScreen 5GT (ScreenOS 5.0.0r8.1)

NetScreen-50 (ScreenOS 5.0.0r9.0)

Juniper SSG-5 (ScreenOS 5.4.0r3a.0)

 

ANY assistance would be most appreciated.  

 

1 REPLY 1
ScreenOS Firewalls (NOT SRX)

Re: Need help disabling SIP ALG on three legacy ScreenOS firewalls

‎08-01-2019 12:12 PM

You can just use CLI to disable.

 

jtac-SSG5-r002-> unset alg sip enable
jtac-SSG5-r002-> get alg
MSRPC ALG : enabled
SUNRPC ALG : enabled
SQL ALG : enabled
SIP ALG : disabled
RTSP ALG : enabled
H323 ALG : enabled
MGCP ALG : enabled
SCCP ALG : enabled