Support Center > Search Results > SecureKnowledge Details
SIP phones behind SMB appliances fail to pull contacts from external PBX Technical Level
Symptoms
  • SIP phones behind SMB appliances fail to pull contacts from the external PBX to which they are registered.
  • Kernel drops are seen for the relevant packets:

    fw_log_drop_ex: Packet proto=17 x.x.x.x:5060 - > y.y.y.y:5060 dropped by fw_early_sip_nat Reason: failed to get SIP header;

    where :

    • x.x.x.x -> is the external PBX IP
    • y.y.y.y -> is the SIP phone IP
  • If SIP inspection is disabled (less secure), then the SIP phones pull the contacts but drop the calls after 15 minutes.
Solution

Contact Check Point Support to get a Hotfix for this issue.
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.
For faster resolution and verification please collect CPinfo files from the Security Management and Security Gateways involved in the case.

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment