topic Re: Skype SIP 5061 port allow in General Topics

Skype SIP 5061 port allow

bugrakeskin — Thu, 11 Jul 2019 11:15:38 GMT

Hi,

I have Skype for Business Edge server, it has DMZ private IP and translated to Public NAT IP. This IP should open TCP-5061 Port to Internet and we opened. It seems traffic is passing correctly. But in real, when i do telnet test, it's fail.

It's not about destination side. At destination side, TCP-5061 is open and accessible.

People say; So in summary if you are using Checkpoint Firewalls, the default rule of SIP 5061 will do layer 7 inspection of SIP and will not work with Lync/Skype. You need to ensure that you create a standard port of TCP 5061 on your perimeter firewall.

But i'm not sure it might be happen also for Pala Alto

Re: Skype SIP 5061 port allow

reaper — Thu, 11 Jul 2019 12:13:46 GMT

the palo alto networks firewall is application aware, so telnet will not be allowed through unless you add it to a security policy

You don't need to go about creating app overrides etc, you simply need to allow the protocols you wish to use in the security policy

Re: Skype SIP 5061 port allow

bugrakeskin — Thu, 11 Jul 2019 12:27:07 GMT

Thanks for answer.

But telnet is allowed. I did telnet test over 443 port to the same destination IP. It seems open. But 5061 doesn't work.

You can also check.