Example 6.9. Protecting Internal H.323 Phones Using IP Rules
In this example, an internal H.323 phone is situated on lannet and has a public IP address. To
make it possible to place a call from this phone to another H.323 phone on the Internet, and to
allow H.323 phones on the Internet to call this phone, we need to configure
IP Rule
objects.
Note: Make sure there are no other rules/policies disallowing or allowing the same kind of
ports/traffic before the IP rules in this example.
Web Interface
Create a new
H.323 ALG
object:
1.
Go to: Objects > ALG > Add > H.323 ALG
2.
Specify a name for the ALG, in this case
my_h323_alg
3.
Click OK
Create a custom
Service
object for H.323:
1.
Go to: Objects > Services > Add > TCP/UDP
2.
Now enter:
•
Name: my_h323_service
•
Type: TCP
•
ALG: my_h323_alg
•
Destination port: 1720
3.
Click OK
Create an IP rule for outgoing H.323 traffic:
Chapter 6: Security Mechanisms
482
Summary of Contents for NetDefendOS
Page 30: ...Figure 1 3 Packet Flow Schematic Part III Chapter 1 NetDefendOS Overview 30 ...
Page 32: ...Chapter 1 NetDefendOS Overview 32 ...
Page 144: ...Chapter 2 Management and Maintenance 144 ...
Page 284: ...Chapter 3 Fundamentals 284 ...
Page 392: ...Chapter 4 Routing 392 ...
Page 419: ... Host 2001 DB8 1 MAC 00 90 12 13 14 15 5 Click OK Chapter 5 DHCP Services 419 ...
Page 420: ...Chapter 5 DHCP Services 420 ...
Page 573: ...Chapter 6 Security Mechanisms 573 ...
Page 607: ...Chapter 7 Address Translation 607 ...
Page 666: ...Chapter 8 User Authentication 666 ...
Page 775: ...Chapter 9 VPN 775 ...
Page 819: ...Chapter 10 Traffic Management 819 ...
Page 842: ...Chapter 11 High Availability 842 ...
Page 866: ...Default Enabled Chapter 13 Advanced Settings 866 ...
Page 879: ...Chapter 13 Advanced Settings 879 ...