A company has implemented a new VoIP system that uses UDP/5060 (SIP) and UDP/10000-20000 (RTP). Initially, App-ID correctly identified these as 'sip' and 'rtp'. However, after a recent software update on the VoIP servers, the RTP traffic, while still using the same port range, is now being identified as 'unknown-udp' due to subtle changes in its header or payload. This is causing inconsistent QOS and security policy enforcement. Which of the following is the most effective approach to ensure correct identification of the RTP traffic while minimizing false positives?
Select one answer.
AI Answer Explanation & Exam Tips
Instant breakdown of key concepts, distractor analysis, and quick exam memory tricks.
Purchase Full Access to view answer options & explanation
The first 151 questions in this bank are completely free. Unlock Full Access on the exam page to view all answer choices, verified answers, explanations, and community discussions for all 503 questions.
