<div dir="ltr"><br><div class="gmail_quote"><div class="HOEnZb"><div class="h5"><div dir="ltr">HI Guys,<div class="gmail_quote"><div dir="ltr"><div><p>I
have to permit RTP traffic from internal network to other organizations
(under different management) on gateway devices (routers, switches). I
am curious to know if there are known attacks/threats when upd range
16384-32767 is permited. RTP source/destination can be desk phone or PC
with softphone. If yes then can we configure gateway routers/switches to
protect from these attacks. </p><p style="min-height:8pt;min-height:8pt;padding:0px"> </p><p>We have cisco 7200, 6500, 3550, 3560, 3750 switches as gateway devices. </p><p style="min-height:8pt;min-height:8pt;padding:0px">
</p>
<p>One
more quick question are there only two ways (NBAR and ACL with udp
range) on routers/switches to identify/match RTP traffic? I know
Firewalls provide feature like inspect, AGL etc to dynamically identify
RTP ports by inspecting control traffic.</p><p style="min-height:8pt;min-height:8pt;padding:0px"> </p><p>Your input will be highly appreciated</p><p style="min-height:8pt;min-height:8pt;padding:0px"> </p><p>Regards</p></div>
</div>
</div></div></div></div></div></div>