Cisco ASA 5505 Configuration Manual page 848

H.323 Inspection
Limitations and Restrictions
The following summarizes limitations that apply when using CTIQBE application inspection:
•
•
•
The following summarizes special considerations when using CTIQBE application inspection in specific
scenarios:
•
•
•
H.323 Inspection
This section describes the H.323 application inspection. This section includes the following topics:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Cisco ASA 5500 Series Configuration Guide using ASDM
38-2
CTIQBE application inspection does not support configurations with the alias command.
Stateful failover of CTIQBE calls is not supported.
Debugging CTIQBE inspection may delay message transmission, which may have a performance
impact in a real-time environment. When you enable this debugging or logging and
Cisco IP SoftPhone seems unable to complete call setup through the adaptive security appliance,
increase the timeout values in the Cisco TSP settings on the system running Cisco IP SoftPhone.
If two Cisco IP SoftPhones are registered with different Cisco CallManagers, which are connected
to different interfaces of the adaptive security appliance, calls between these two phones fails.
When Cisco CallManager is located on the higher security interface compared to
Cisco IP SoftPhones, if NAT or outside NAT is required for the Cisco CallManager IP address, the
mapping must be static as Cisco IP SoftPhone requires the Cisco CallManager IP address to be
specified explicitly in its Cisco TSP configuration on the PC.
When using PAT or Outside PAT, if the Cisco CallManager IP address is to be translated, its TCP
port 2748 must be statically mapped to the same port of the PAT (interface) address for Cisco IP
SoftPhone registrations to succeed. The CTIQBE listening port (TCP 2748) is fixed and is not
user-configurable on Cisco CallManager, Cisco IP SoftPhone, or Cisco TSP.
H.323 Inspection Overview, page 38-3
How H.323 Works, page 38-3
H.239 Support in H.245 Messages, page 38-4
Limitations and Restrictions, page 38-4
Select H.323 Map, page 38-5
H.323 Class Map, page 38-5
Add/Edit H.323 Traffic Class Map, page 38-6
Add/Edit H.323 Match Criterion, page 38-6
H.323 Inspect Map, page 38-7
Phone Number Filtering, page 38-9
Add/Edit H.323 Policy Map (Security Level), page 38-9
Add/Edit H.323 Policy Map (Details), page 38-10
Add/Edit HSI Group, page 38-12
Add/Edit H.323 Map, page 38-12
Chapter 38 Configuring Inspection for Voice and Video Protocols
OL-20339-01