Disable SIP Inspection on FTD

Available Languages

Download Options

  • PDF     (131.0 KB)
    View with Adobe Reader on a variety of devices
Updated:May 27, 2026
Document ID:225975

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Contents

Issue

A firewall administrator wants to disable SIP (Session Initiation Protocol) inspection on a Firewall Threat Defense (FTD) device.

Environment

  • FTD running software version 7.4.4. Other software versions are also affected.

  • Firewall Management Center (FMC) running software version 7.7.12. Other software versions are also affected.

  • Session Initiation Protocol (SIP) inspection is enabled on FTD.

Resolution

There are 2 ways to globally disable SIP inspection:

Solution 1: Disable SIP from FTD CLISH CLI

Use this command:

> configure inspection sip disable
Building configuration...
Cryptochecksum: ef7528dc 7338986d 6714a3a2 4770528e

7818 bytes copied in 0.250 secs
[OK]


Verification

> show running-config policy-map | include sip

>

Solution 2: Disable SIP using FlexConfig

On FMC navigate to Devices > FlexConfig and create a FlexConfig object with this content:

FlexConfig_Object


The CLI to be deployed:

policy-map global_policy
 class inspection_default
  no inspect sip


Apply the FlexConfig policy and select Preview Config in order to preview it:

FlexConfig_Preview

Finally, Deploy the policy.

Verification

firewall# show run policy-map | include sip
firewall#
note-icon

Note: You need to clear the existing SIP connection from LINA connection table so that the connections are re-established without SIP inspection. You can use this command in order to verify the existing SIP connections:

firewall# show conn port 5060

Disable SIP inspection for specific hosts

To disable SIP inspection for specific hosts check https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/225969-configure-firewall-threat-defense.html#toc-hId-2007972800

Cause

Disabling SIP inspection on FTD can be done in 2 ways:

  • FTD CLI

  • Using FlexConfig

Related Content

Revision History

Revision Publish Date Comments
1.0
27-May-2026
Initial Release
TAC Authored

Contributed by Cisco Engineers

  • Mikis Zafeiroudis
    Cisco TAC Engineer
  • Ilkin Gasimov
    Cisco TAC Engineer

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products