Likely no FW issue, as a FW would not (normally) send a ICMP unreachable
back but simply drop the UDP Packet. So it' s likely the Target Sytem
that sends this back. -R.
Did you accidentally set a filter ? # diag debug flow filter It also
doesn' t show Traffic that is offloaded to a NP2/NP4/SoC Network
Processor. Only (eg in TCP) the initial Handhshake should be seen.
The SIP Session Helper is not the SIP ALG. The SIP-Session helper is a
very trivial implementation and is defined under # conf sys
session-helper The SIP-ALG is its own " big" ALG, being set per Policy
(VoIP Profile under UTM). It' s much more compre...