VoIP

XG Firewall supports VoIP using both Session Initiation Protocol (SIP) and H.323 standards.

Your VoIP provider will supply the configuration details for your VoIP system. You will then need to configure a firewall rule to allow either the SIP or H.323 service.

The H.323 and SIP standards provide a foundation for audio, video, and data communications across IP-based networks. This enables users to participate in video and audio conferences, even though they are using different applications. H.323 and SIP use different flows for signaling and data transfer. Signaling flow is used to negotiate the configuration parameters, the IP address and the port that are used to establish the data flow. These protocols are harder to filter by firewalls since they violate layering by introducing layer 3 and 4 parameters in layer 7 of the OSI model. To overcome this situation in iptables, Netfilter provides connection tracking helpers which are modules that are able to assist the firewall in tracking these protocols.

The most common issues encountered with VoIP are poor call quality, one way audio, or calls dropping. To resolve some of the common issues with VoIP, see the related links.