topic Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port in General Topics

Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service ports.

taviss — Sun, 12 Jun 2016 06:06:45 GMT

It seems that I can not seem to get the voice chat in Blizzards over watch to work through a PA.

So as a test i put TCP ports 1119, 3724, 6113, 80, and udp 26503-36503 and 3724 forward through allowing any app, to the PC running the game. Still didn't make a differance. Not sure if anyone has a PA setup with users playing games behind it or not, just wondering if anyone else has run into this issue.

Cheers,

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

bmorris1 — Mon, 13 Jun 2016 14:30:14 GMT

Hi,

You can always request a signature be made for this application:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Request-a-new-App-ID/ta-p/60834

In the mean time, try creating a temporary 'allow all' rule for your source IP and play the game to see what ports, urls & applications hit this rule. Then create a new rule based on what you discover.

Make sure you log the rule and have a url filtering profile attached set to alert.

hope this helps,

Ben

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

taviss — Mon, 13 Jun 2016 16:24:49 GMT

Yeah so this is the odd thing, i have put in an wide open rule. I have allowed all through and set the application default to any, and it still seems to clip on the outside. It seems very odd to me.

I have requested the application into the new app id allready.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

reaper — Tue, 14 Jun 2016 07:38:11 GMT

some voip implementations could be flak. is the voice chat being identified as something specific? you may need to disable the ALG on the application level

It's also possible that without a proper signature (while it is being created) you need to set static bi-directional NAT and allow some inbound ports to your IP

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

taviss — Thu, 16 Jun 2016 04:53:31 GMT

Yeah so here is the crazy thing, i did a bi-directional NAT and and opened the firewall wide up (not too worried it's a home device use for testing before putting in production) and it still clipped the voice data on it. I run the PC direct of the ISP no problem. Put the PA in wireline and same thing. It's super odd. I would have thought a bi-direction with wide open rules would work. Also made sure it wasn't application default but application any.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

pulukas — Fri, 17 Jun 2016 20:45:12 GMT

Sounds like you are hitting one of the ALG setups probably a VOIP one. What do the logs say for the permitted traffic? This might help see what needs to be turned off or put in for override.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

erikda — Mon, 18 Dec 2017 09:19:02 GMT

Disabling ALG made it work for me.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

nextgenhappines — Wed, 20 Dec 2017 02:11:59 GMT

@erikda Have you open a case with TAC? We have a case with TAC now to have them look into why in game chat is not working. I would suggest to open a case with TAC from your end as well, PAN will get this issue resolve.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

nextgenhappines — Thu, 21 Dec 2017 23:09:53 GMT

We had a troubleshoot session with TAC. The workaround is setup an application override for traffic using UDP port 6250.

https://live.paloaltonetworks.com/t5/Learning-Articles/Tips-amp-Tricks-How-to-Create-an-Application-Override/ta-p/65513

We are requesting an overwatch appid. No ETA yet. stay tune.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

erikda — Fri, 22 Dec 2017 08:31:45 GMT

Again, for me the solution was to disable ALG for application sip.

Voice now works in Overwatch, and Playerunknown's battlegrounds.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

nextgenhappines — Fri, 22 Dec 2017 16:46:58 GMT

Hi erikda,

Understood, in our environment, if we disabled the SIP application ALG, it will break other VoIP applications.

happy holidays,

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

jvalentine — Fri, 22 Dec 2017 17:08:02 GMT

Disabling the SIP ALG under Objects / Applications / SIP, disables it for the entire firewall.

Using an Application Override (while doing some other things) also has the effect of disabling the SIP ALG.

Both methods are acceptable workarounds depending on your environments.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

Rhollmer — Tue, 07 Aug 2018 19:36:44 GMT

Just to bump this thread... On SW version 8.0.10, that was the fix for me as well. Override SIP-ALG and it should work fine.

Re: Blizzard New Game Overwatch PA not allowing voice traffic through, Even with custom service port

vamontford — Wed, 17 Oct 2018 19:14:18 GMT

It worked for me as well. Thanks for posting your solution! Objects->Applications->SIP->ALG->Customize->Disable