topic Re: Skype on PAN 8.0 in General Topics

Skype on PAN 8.0

Retired Member — Tue, 04 Apr 2017 10:35:12 GMT

Has anyone had issue with Skype on PAN 8? This week we needed to bypass decryption of *.skype.com to get Skype to work on the Apple iOS Skype app (consumer Skype). Our setup inspects all ssl traffic apart from the finance /banking / health categories.

Thanks

Re: Skype on PAN 8.0

reaper — Tue, 04 Apr 2017 11:19:07 GMT

Have you followed the guidelines in this article? Controlling Skype using App-ID

Re: Skype on PAN 8.0

TranceforLife — Tue, 04 Apr 2017 12:29:40 GMT

Did it ever work? Is it suddenly stopped working or maybe after some changes (e.g PAN-OS upgrade etc)?

Re: Skype on PAN 8.0

Retired Member — Wed, 05 Apr 2017 00:37:25 GMT

Yes absolutley worked and have followed guide. If I disable decrytpion on this I can login fine on the ipad. iPad Skype app reports:- Problem signing in. Unable to connect to Microsoft, check your network settings and try again.

Apple iOS 10.3
Skype app version 6.34.0.105

PAN 8.0.1

enable this and we can sign in.

What is also interesting, if I do a traffic log on the IP address of the far end of a Skype video call we see this traffic in the logs:- Source IP = far end IP, Dest IP = public IP of Palo.

thanks