Is There Any "Downside" To Disabling SIP ALG?

Forums › VoIP › Is There Any "Downside" To Disabling SIP ALG?

samjaynz

6 posts

Wannabe Geek

#154521 30-Oct-2014 17:51

Hi all,

Sorry if this sounds like a silly question ... but is there any downside (in terms of security, performance etc) to disabling SIP ALG?

As part of working from a home office my boss has provided me with a Cisco IP phone, with the service itself provided by Voyager.

I'd had a lot of trouble getting it setup (no dial tone etc) but after speaking with Voyager and Spark support I was able to get it working by disabling SIP ALG on my router.

I just want to make sure I'm not opening myself up to any vulnerability, or costing the landlord - who pays the phone bill - anything extra by disabling the SIP ALG setting. If it makes any difference I'm using a Huawei HG630b router on Spark Fibre.

Thanks in advance!

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1165194 30-Oct-2014 17:53

Some routers it really doesn't work too well resulting in things like one way voice and other such problems. This all depends on provider, type of phone system used and setup etc.

Best disable it and give it a go.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

samjaynz

6 posts

Wannabe Geek

#1165199 30-Oct-2014 18:00

Thanks for that. I've disabled it and can sent calls out - just need to wait until tomorrow am to test the incoming calls (our phone system is set up to prevent incoming calls after a certain time in the evening)

Main thing is I don't want to be opening some nasty vulnerability issue on my home network.

Amosnz

567 posts

Ultimate Geek

Lifetime subscriber

#1165223 30-Oct-2014 18:42

I had to disable SIP ALG on my previous router to get my voip connection working too.

Speedtest

jnimmo

1097 posts

Uber Geek

#1165228 30-Oct-2014 18:56

No this won't open you to any vulnerabilities*, SIP ALG is usually designed to open the required ports etc rather than having to static NAT them. However these days it seems to cause more issues than not with the phones and routers I've used...

* - assuming you haven't opened anything else up :)

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1165233 30-Oct-2014 19:22

The first thing I do with any device with a SIP ALG is disable it. In 99% of cases it breaks VoIP, and I still don't understand why so many vendors insist on enabling it by default.