VoIP: In what VoIP, Streaming Media, scenario should SIP/H323 transformations be enabled?

VoIP: In what VoIP, Streaming Media, scenario should SIP/H323 transformations be enabled?

 

Overview:

Enabling or disabling transformation will resolve the two of the three VoIP/Streaming media problems. Please review Required Basic Information for Successful Troubleshooting of Voice over IP Issues

1. Not being able to register
2. Missing media

 

Enabling or disabling transformation is mainly determined by where the servers are located, and by where the endpoints, communication devices, or located.

1. Enable transformations if the server, PBX or Proxy, is on the internet, and the devices are behind the firewall.
2. Disable transformations if the server and endpoints are behind the firewall, and the PBX talks to the outside world, VoIP provider. Using enhanced firmware: create the needed address objects, NAT policies, and access rule(s) for the server. It maybe necessary to create an outbound rule for the registration port to adjust the UDP timeout value from the default of thirty seconds from the PBX LAN address to WAN. The adjusted timeout should be 120 seconds more than the registration timeout configured on the server. Service groups will reduce the amount of rules needed. If behind a firewall using standard firmware follow the normal rules creation for all ports needed allowing access to the internal address. Standard does not have the option to adjust UDP timeout. Transformation enabled may work, depending on the vendor's implementation of the RFC.
3. Disable transformations if the communication is only through VPN tunnels.
4. If the configuration is a mesh of VPN communication, and public sip providers, disable transformations on the remote, and configure accordingly on the main site. If provider has different requirements.
5. Often when disabling or enabling a transformation option requires a reboot of the firewall.