Phones Stop Working After Upgrade to PAN-OS 6.0

PAN-OS 6.0

Issue

After an upgrade to PAN-OS 6.0 the SIP phones stop fully working. Users are able to make calls, but when the phone is answered no sound is heard. You currently have an Application Override policy configured for SIP phones because of an issue with ALG (Application Layer Gateway). You currently have a Security Policy configured to allow a specific set of ports for RTP and RTCP traffic, which allow voice communication.

Resolution

In previous versions of PAN-OS an Application Override policy was needed to turn off ALG.

In PAN-OS 6.0, ALG can be disabled by following the steps below:

1. Go into the Applications page (Objects > Applications)
2. Search and click on the desired application
3. Open the ALG option for the application
4. Checking the Disable ALG box
   

On the CLI, sse the following command to disable the SIP ALG:

# set shared alg-override application sip alg-disabled yes|no

Note: Disable ALG while running PAN-OS 6.0.x even if an Application Override Policy is enabled. Disabling ALG is the equivalent of creating an Application Override Policy in PAN-OS versions 6.0 and higher; the override policy is no longer needed.

owner: jperry