CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


CPUG Challenge 2018?? We will be holding another CPUG Challenge for 2018.
The plan is to time it around CPX again (earlier this year), but not necessarily limit it to those in attendance.
I'll provide more details as we get a bit closer, but be ready! -E

 

Results 1 to 2 of 2

Thread: SIP + dst nat == fix up headers?

  1. #1
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,482
    Rep Power
    8

    Default SIP + dst nat == fix up headers?

    Does anyone know if the server side of a SIP session should have headers rewritten? I have a src and dst nat ( i know, asking for trouble ). I can see the client headers are being rewritten correctly, but the server side isn't. For example the contact: field in the message header has the server's real address and not the nat IP of the the server. To be clear the IP (layer 3) of the server was correctly natted.

    If i can't get this to work right i think i'm going to have to do a double vpn. Haven't done that before but its all setup in a lab replication so i have a play ground setup.


    assuming i'm goin double vpn this is what i'm thinking.

    phone fw1 < -VPN1 -> fw2 < - VPN2 - > sip server

    where vpn1 is really across the internal network and VPN2 is across the inet.

    I'll take my answer off air, thanks!

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,482
    Rep Power
    8

    Default Re: SIP + dst nat == fix up headers?

    So in my case the destination is a proxy as all the phones call the voip server and thus a dest nat. Once support cleared that up definition they pointed me back to the nat restrictions SK and it says its not supported (could be bidirectional or proxy nat).

Similar Threads

  1. Can you block non-ASCII characters in the headers while allowing them in the body?
    By Spacetrucker in forum Web Security Blade (Formerly Web Intelligence)
    Replies: 8
    Last Post: 2011-02-11, 20:04
  2. content disposition headers
    By forbin in forum Content Security/Security Servers/CVP/UFP
    Replies: 1
    Last Post: 2006-10-06, 12:46

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •