Ctiqbe Inspection; Ctiqbe Inspection Overview; Limitations And Restrictions - Cisco PIX 500 Series Configuration Manual

CTIQBE Inspection

CTIQBE Inspection
This section describes CTIQBE application inspection. This section includes the following topics:
•
•
•

CTIQBE Inspection Overview

CTIQBE protocol inspection supports NAT, PAT, and bidirectional NAT. This enables Cisco IP
SoftPhone and other Cisco TAPI/JTAPI applications to work successfully with Cisco CallManager for
call setup across the security appliance.
TAPI and JTAPI are used by many Cisco VoIP applications. CTIQBE is used by Cisco TSP to
communicate with Cisco CallManager.

Limitations and Restrictions

The following summarizes limitations that apply when using CTIQBE application inspection:
•
•
•
The following summarizes special considerations when using CTIQBE application inspection in specific
scenarios:
•
•
•
Cisco Security Appliance Command Line Configuration Guide
25-10
CTIQBE Inspection Overview, page 25-10
Limitations and Restrictions, page 25-10
Verifying and Monitoring CTIQBE Inspection, page 25-11
CTIQBE application inspection does not support configurations with the alias command.
Stateful failover of CTIQBE calls is not supported.
Entering the debug ctiqbe command may delay message transmission, which may have a
performance impact in a real-time environment. When you enable this debugging or logging and
Cisco IP SoftPhone seems unable to complete call setup through the security appliance, increase the
timeout values in the Cisco TSP settings on the system running Cisco IP SoftPhone.
If two Cisco IP SoftPhones are registered with different Cisco CallManagers, which are connected
to different interfaces of the security appliance, calls between these two phones fails.
When Cisco CallManager is located on the higher security interface compared to
Cisco IP SoftPhones, if NAT or outside NAT is required for the Cisco CallManager IP address, the
mapping must be static as Cisco IP SoftPhone requires the Cisco CallManager IP address to be
specified explicitly in its Cisco TSP configuration on the PC.
When using PAT or Outside PAT, if the Cisco CallManager IP address is to be translated, its TCP
port 2748 must be statically mapped to the same port of the PAT (interface) address for Cisco IP
SoftPhone registrations to succeed. The CTIQBE listening port (TCP 2748) is fixed and is not
user-configurable on Cisco CallManager, Cisco IP SoftPhone, or Cisco TSP.
Chapter 25 Configuring Application Layer Protocol Inspection
OL-12172-03