VoIP firewall rules and priority markings

Published Mar 28, 2024 • Updated May 1, 2026

Overview

Real-time UDP cannot survive bulk download saturation—QoS and pinholes matter.

Checklist

SIP trunk provider IP list; RTP port ranges documented bidirectionally.

QoS

DSCP EF for voice classes on LAN; trust boundaries at routers.

ALG

SIP ALG off on modern SBC setups—vendor-specific guidance.

Troubleshooting

MOS scores; PCAP on mirror port short duration only with approval.

Related Articles

EDR deployment checklist for new workstations

## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...

security-endpoint-protection msp +1

Handling Defender for Business false positives

## Overview False positives waste analyst time and train users to ignore alerts. This article stand...

security-endpoint-protection msp +1

Application allowlisting with Windows Defender ASR rules

## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...

security-endpoint-protection msp +1