topic Share screen in skypeforbussiness not working in General Topics

Share screen in skypeforbussiness not working

soporteseguridad — Thu, 18 Jan 2018 12:00:09 GMT

Hi,

We are facing a strange problem with Skypeforbusiness. Two users are in a conference. When the user behind Palo alto tries to share the screen is not working, but when the remote user shares the screen is working.

The error in skype is "Skype for Business: We couldn’t connect to the presentation because of network issues"

In our PA is everything allowed. No policy denies. In pcap DROP we see this:

Is there any issue with the option "share screen" in skype4bussiness????

Re: Share screen in skypeforbussiness not working

kiwi — Thu, 18 Jan 2018 12:24:17 GMT

Hi @soporteseguridad,

As per policy you might be allowing everything but that doesn't mean nothing is dropped.

I would recommend to configure a filter and check the global counters for more information :

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-check-global-counters-for-a-specific-source-and/ta-p/65794

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Troubleshoot-Using-Counters-via-the-CLI/ta-p/57496

Cheers !

-Kiwi.

Re: Share screen in skypeforbussiness not working

soporteseguridad — Thu, 18 Jan 2018 16:00:20 GMT

Yes i know, doing this filter is hard. Because the users create a meeting using skype4business, when the meeting is created, one of this user tries to share the desktop. So I'm not sure who would be the source and destination for this filter.

I undertand that source would be my end-user, ¿but the destinations of this flow for sharing screen? ¿skype cloud?¿remote user?

Re: Share screen in skypeforbussiness not working

OtakarKlier — Fri, 19 Jan 2018 19:40:38 GMT

Hello,

Also Skype does not like to be decrypted, so if you are doing ssl decrypt, you might want to put in a bypass policy.

Regards,

Re: Share screen in skypeforbussiness not working

soporteseguridad — Mon, 22 Jan 2018 09:07:22 GMT

Thanks a lot. Problem was in MineMeld. The feed did not have this web to share screen. We added this web manually in allow list and its working.

thanks a lot