•
Name: my_h323_gatekeeper_service
•
Type: UDP
•
ALG: my_h323_alg
•
Destination port: 1719
3.
Click OK
Create the SAT IP rules for incoming gatekeeper traffic:
1.
Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2.
Now enter:
•
Name: H323In
•
Action: SAT
•
Source Interface: any
•
Source Network: all-nets
•
Destination Interface: core
•
Destination Network: wan_ip (external IP of the firewall)
•
Service: my_h323_gatekeeper_service
•
Comment: SAT rule for incoming communication with the gatekeeper located at
ip-gatekeeper.
3.
For SAT enter Translate Destination IP Address: To New IP Address: ip-gatekeeper (IP
address of gatekeeper).
4.
Click OK
1.
Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2.
Now enter:
•
Name: H323In
•
Action: Allow
•
Source Interface: any
•
Source Network: all-nets
•
Destination Interface: core
•
Destination Network: wan_ip (external IP of the firewall)
•
Service: my_h323_gatekeeper_service
•
Comment: Allow incoming communication with the gatekeeper.
3.
Click OK
492
Chapter 6: Security Mechanisms