====== SIP ======
[[http://danielkleviansky.com/palo-alto-firewall-and-cisco-sip-issues/|This link]] is very good. 

  - Create a custom app that is TCP/UDP 5060.
  - Create and App-ID override policy for TCP 5060 and set it to this app.
  - Create and App-ID override policy for UDP 5060 and set it to this app.

I have seen this fix an issue where the call was made but audio didn't work for 10 seconds (also, dial back wasn't audible during calling).