SIP flow with TCP - SIP TCP cleartext - behavior of the 3 possible options.

Hello good afternoon to everyone in PANgurus!

For an environment with TCP-SIP with the ALG disabled at App "SIP" level and/or with AppOverride, I would understand that these options should no longer generate any noise, problem or unwanted behavior no ?

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-setup-session/tcp-settings#:~:text=Select%20one%20one%20of%20the%20following%20options%20to%20set%20the%20cleartext%20proxy%20behavior%20for%20SIP%20TCP%20sessions%20when%20a%20segmented%20SIP%20header%20is%20detected.

Has anyone had cases with SIP TCP with the ALG disabled at App "SIP" level and/or with AppOverride, with SIP-TCP flows.

What is the recommended option(s), for an environment like the one discussed, when setting, setting and/or applying the correct option.

SIP TCP cleartext:

-Always Off

-Always enabled

-Automatically enable proxy when needed

Thanks for the comments, collaboration and your time

Best Regards!

2 comments

Comments (2)

Reaper

Feb 22, 2023

SIP is like voodoo to me. It's either default app-id, app-id with ALG disabled, app override to custom app, app override to sip (yes I've had to do this once because sip was swapping g the sequence of 2 packets causing normal app-id to fail)

That's a long-winded way of saying I have no idea what those options do

MetgatzGR

Feb 21, 2023

Hello @Reaper, how are you ? all right, you know more or less what this post is about, I can't find any clear documentation about it.

Thanks as always for your collaboration, time and support.

Regards