Sip - McAfee SG310 Administration Manual

Network Setup menu options

SIP

Figure 152 Defined ToS Services
Editing a packet priority rule
Under Network Setup, click QoS Traffic Shaping, and then select the ToS Packet Priority tab. The
1
ToS Packet Priority page appears.
Click the edit icon for the rule you want to edit. An edit page appears for the rule.
2
Make your changes and click Finish.
3
Deleting a packet priority rule
Under Network Setup, click QoS Traffic Shaping, and then select the ToS Packet Priority tab. The
1
ToS Packet Priority page appears.
Click the delete icon for the rule you want to delete. The rule is deleted from the service list.
2
SIP
SIP (Session Initiation Protocol, RFC3261) is the protocol of choice for most VoIP phones to initiate
communication. By itself, SIP does not work from behind masquerading firewalls, as the transferred data
contains IP addresses and port numbers.
Note: SIP is applicable to UTM Firewall Models SG565, SG580, and SG720 only.
The SIP proxy of the UTM Firewall appliance allows SIP software clients or SIP hardware clients to work
from a private network (such as your LAN) behind a masquerading firewall such as the one on the UTM
Firewall appliance. SIP software includes clients like kphone, linphone, and SJphone. SIP hardware includes
VoIP (Voice over IP) phones that are SIP-compatible, such as those from Cisco, Grandstream, and Snom.
If you use an external SIP service such as the Gizmo Project or Skype, you typically do not need to use the
SIP proxy. These services use STUN (Simple Traversal of UDP through NATs) to facilitate communication
from behind a masquerading firewall.
The SIP proxy listens on UDP port 5060 for SIP requests. This is the standard SIP port and should not
generally need to be changed. The SIP proxy listens on UDP ports 7070-7079 for RTP traffic, which is the
actual voice data.
The SIP proxy allows seamless communication between SIP phones running on an internal network (LAN or
DMZ) and SIP phones in the wider Internet. See the Siproxd Web site for full details:
http://siproxd.sourceforge.net/
A typical SIP configuration is shown in
146 McAfee UTM Firewall 4.0.4 Administration Guide
Figure 153: