[cisco-voip] Fwd: RTP permission and related attacks/threats

[Ahmed -Y]

HI Guys,

I have to permit RTP traffic from internal network to other organizations
(under different management) on gateway devices (routers, switches). I am
curious to know if there are known attacks/threats when upd range
16384-32767 is permited. RTP source/destination can be desk phone or PC
with softphone. If yes then can we configure gateway routers/switches to
protect from these attacks.



We have cisco 7200, 6500, 3550, 3560, 3750 switches as gateway devices.



One more quick question are there only two ways (NBAR and ACL with udp
range) on routers/switches to identify/match RTP traffic? I know Firewalls
provide feature like inspect, AGL etc to dynamically identify RTP ports by
inspecting control traffic.



Your input will be highly appreciated



Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20131011/390692ea/attachment.html>