Zoom phone custom signature thru: ssl-req-chello-sni

R.Tudon — Sun, 02 Jun 2024 21:21:51 GMT

Hi everyone!

We are currently moving our phone system to zoom, and we had an issue with the zoom application, some of their traffic its categorized as an incomplete causing that some calls hang out, or don't ring, I made an custom application, using the signature ssl-req-chello-sni and pasting the complete server's name that was registred in that drop package, this actually did work, but i wanted to make it dynamic, it's probably that specific server changes the name, but it ends with zoom.us,

If i type *.zoom.us, would work? or what it's the best practice?

Re: Zoom phone custom signature thru: ssl-req-chello-sni

PavelK — Sun, 02 Jun 2024 22:26:40 GMT

Hello @R.Tudon

Palo Alto has hosted EDL for Zoom (Zoom Phone has own EDL as well): Edl Hosting Service. Here is a reference in documentation to set it up: Create an External Dynamic List Using the EDL Hosting Service. Using Zoom IPv4 EDL and Zoom URL EDL in a policy might be easier to setup and maintain compared it to configuring custom app-id.

Regarding URLs, you should configure these:

zoom.us/
*.zoom.us/

Kind Regards

Pavel

topic Zoom phone custom signature thru: ssl-req-chello-sni in General Topics

Zoom phone custom signature thru: ssl-req-chello-sni

Re: Zoom phone custom signature thru: ssl-req-chello-sni