Cisco ASA 5505 Configuration Manual page 847

Configuring Inspection for Voice and Video
Protocols
This chapter describes how to configure application layer protocol inspection. Inspection engines are
required for services that embed IP addressing information in the user data packet or that open secondary
channels on dynamically assigned ports. These protocols require the adaptive security appliance to do a
deep packet inspection instead of passing the packet through the fast path. As a result, inspection engines
can affect overall throughput.
Several common inspection engines are enabled on the adaptive security appliance by default, but you
might need to enable others depending on your network. This chapter includes the following sections:
•
•
•
•
•
•
CTIQBE Inspection
This section describes CTIQBE application inspection. This section includes the following topics:
•
•
CTIQBE Inspection Overview
CTIQBE protocol inspection supports NAT, PAT, and bidirectional NAT. This enables Cisco IP
SoftPhone and other Cisco TAPI/JTAPI applications to work successfully with Cisco CallManager for
call setup across the adaptive security appliance.
TAPI and JTAPI are used by many Cisco VoIP applications. CTIQBE is used by Cisco TSP to
communicate with Cisco CallManager.
OL-20339-01
CTIQBE Inspection, page 38-1
H.323 Inspection, page 38-2
MGCP Inspection, page 38-13
RTSP Inspection, page 38-19
SIP Inspection, page 38-23
Skinny (SCCP) Inspection, page 38-36
CTIQBE Inspection Overview, page 38-1
Limitations and Restrictions, page 38-2
C H A P T E R
Cisco ASA 5500 Series Configuration Guide using ASDM
38
38-1