Likely no FW issue, as a FW would not (normally) send a ICMP unreachable
back but simply drop the UDP Packet. So it' s likely the Target Sytem
that sends this back. -R.
Did you accidentally set a filter ? # diag debug flow filter It also
doesn' t show Traffic that is offloaded to a NP2/NP4/SoC Network
Processor. Only (eg in TCP) the initial Handhshake should be seen.
The SIP Session Helper is not the SIP ALG. The SIP-Session helper is a
very trivial implementation and is defined under # conf sys
session-helper The SIP-ALG is its own " big" ALG, being set per Policy
(VoIP Profile under UTM). It' s much more compre...
If the call comes up but no voice, than it seems that the UDP-Packets
for Voice (RTP) are being blocked. These Ports are dynamically assigned
high-ports during SIP Session setup. - Check if SIP is running UDP/5060
in your case - Check KB for the SIP-...