The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
SDP traffic is dropped after an upgrade to R80.30 Jumbo Hotfix Take 215
IPS, Quantum Security Gateways
R80.10, R80.20, R80.30, R80.40, R81
SDP traffic is dropped after an upgrade to R80.30 Jumbo Hotfix Take 215.
The following drop appears in the drop debug: fw_log_drop_ex: Packet proto=17 x.x.x.x:x -> x.x.x.x:5060 dropped by fw_post_vm_chain_handler Reason: Handler 'sip_manager' drop;
A log with the following fields appears in SmartConsole logs: VoiP Reject Reason: Malformed SIP packet
VoIP Reject Reason information: Invalid SDP header
SIP debug shows the following lines: fw ctl debug -m fw + sip
fw ctl debug -m WS_SIP + all
@;1509687;13Aug2020 9:43:55.703069;[cpu_3];[fw4_0];voip_handle_bool_protection: 18.104.22.168 is not allowed to open media ports on behalf of 22.214.171.124. not dropping. action=0. protection. track=-1. not logging;
@;1509687;13Aug2020 9:43:55.703073;[cpu_3];[fw4_0];sip_save_sdp_invite: Failed - unexcpected pkt_type=180;
@;1509687;13Aug2020 9:43:55.703076;[cpu_3];[fw4_0];sip_handle_sdp: failed to save SDP. dropping;
Due to a change in the code, SDP Status code 180 is not handled properly.