"ooh323" vs RPAD rule

[Anonymous]

Hi colleagues,

couple of days ago we faced an weird case: fans of freebie are using software scanner of H.323 protocol — "ooh323". Using this app they are able to make calls through our RPAD. We've tried co create on RPAD blocking rule for guest calls from this client, but it doesn't work =(

Seems to me the rule is incorrect... or the ticket needs to be created.

[simons3]

Grinch,

Here is a document which describes this unauthorized attempt to gain access to your vide network and how to stop it. I believe it was taken from our Security portion of the support website.

In any case, you can create an RPAD rule to block this access. Here is one example of such a rule.

request.endpointVendor.productId == "ooh323"

Just create this rule and add it to your H323 port 1720 with an action of deny.

S.

[simons3]

Ops. forgot the doc...

[Anonymous]

Hi Simons,

Thank you for the reply! Actually we've tried to create the rule you've described, but it has no effect. So now we're going to study the doc. Hope we'll find the solution.

Thanks!