Cisco 7604 Configuration Manual page 501

Chapter 22 Applying Application Layer Protocol Inspection
Figure 22-15
In Figure
for 4xx/5xx/6xx SIP messages. If 200 OK is not received, the media connection is cleared after the
timeout sip-disconnect occurs.
It is possible to extend the timeout for provisional responses. The timeout for pinholes receiving 1xx/2xx
responses is configurable, or configured based on the EXPIRE field. When the EXPIRE field exists in
the SIP INVITE message, and is less than 30 minutes, the timeout for pinholes for receiving 1xx/2xx
responses is set to the EXPIRE field value. If the EXPIRE field value in the SIP INVITE header is greater
than 30 minutes, the timeout for provisional responses is set to 30 minutes. In the absence of the EXPIRE
field in the SIP INVITE message, the timeout for provisional responses is set to the value configured
using the timeout sip-invite command.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Media Connection Clear on 4xx/5xx/6xx SIP Messages
Firewall Service Module
UAC
INVITE
100 Trying
180 ringing with SDP
200 OK
4XX response
ACK
Media CONN entry is
tear down after receiving
Error(4xx-6xx) response
22-15, the media connections are cleared immediately when 200 OK is received in response
(FWSM)
Media CONN entry
generate on FWSM
Media CONN entry
existing time
SIP Inspection
UAC
22-85