Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Firewall h323 inspection

This thread has been viewed 0 times

  • 1.  Firewall h323 inspection

    Posted Jun 18, 2012 02:32 PM

    I am wondering if the Aruba firewall has any inspection features similar to an ASA or other firewalls.  I have heard that Avaya's implementation of H323 on the 9650's may not agree with the inspection on some firewalls.  Does anyone know if any type of inspection functionality for certain protocols are part of the feature set?

     

    Thanks



  • 2.  RE: Firewall h323 inspection

    Posted Jun 19, 2012 12:43 AM
    @jmadej wrote:

    I am wondering if the Aruba firewall has any inspection features similar to an ASA or other firewalls.  I have heard that Avaya's implementation of H323 on the 9650's may not agree with the inspection on some firewalls.  Does anyone know if any type of inspection functionality for certain protocols are part of the feature set?

     

    Thanks

    Stateful processing is done on the firewall 

     

    (master) #show firewall | include 323
    Stateful H.323 Processing Enabled

     

     

     



  • 3.  RE: Firewall h323 inspection

    Posted Jun 19, 2012 02:47 PM

    Thanks for the info. This is exactly what I am looking for.  Do you happen to know the commands to disable and enable these inspection features?



  • 4.  RE: Firewall h323 inspection

    Posted Jun 19, 2012 02:49 PM

    The stateful H323 processing is enabled by default 

     

    To disable it, use the following command:

    (master) (config) #firewall disable-stateful-h323-processing


    (master) (config) #show firewall | include 323
    Stateful H.323 ProcessingDisabled

     

    To re-enable it, use the following command: 

    (master) (config) #no firewall disable-stateful-h323-processing


    (master) (config) #show firewall | include 323
    Stateful H.323 ProcessingEnabled