Configuring SCCP ALG in ScreenOS Devices (NSM Procedure)

To configure SCCP ALG:

  1. In the NSM navigation tree, select Device Manager > Devices.
  2. Select a security device and then double-click the device on which you want to modify the ALG section. The device configuration appears.
  3. In the device navigation tree, select Advanced > ALGs.
  4. Select Enable SCCP ALG.
  5. Click the Show button to expand the SIP settings.
  6. Use the Up or Down arrow keys to specify the inactive media timeout. The default setting is 120 seconds.
  7. Select the Enable Call Flood Protection to Call Manager check box. The feature is not enabled by default.
  8. Enter a threshold value for the maximum number of calls per minute. The default is 20 calls per minute.

    Note: The threshold value is per client to protect the CallManager from being flooded with new calls either by an already compromised connected client or a faulty device.

  9. Select Pass unidentified Skinny message in Route mode check box.
  10. Select Pass unidentified Skinny message in NAT mode check box.

    Note: When you select the “pass unidentified message” option in either Route or NAT mode, the message that had an error in decoding (because of unidentified message ID or parameter) is forwarded as-is without any processing.

  11. Click OK to apply your settings.

Related Documentation