topic Re: Mitel decrypt error in General Topics

Mitel decrypt error

cdcirexx — Mon, 22 Jun 2020 20:04:17 GMT

Hi all,

we have a open ticket with TAC, but wanted to ask if anyone's seen this, we're in the testing phase of it, and one of the phone's traffic shows up in the logs as decrypt error in the end result, so that phone is not able to login to the mitel portal, tac also disabled the user-id policy to narrow it down(I have tried to add a app override already, but haven't tried to disable alg. They're in the process of researching it, but we have a deadline coming up.

thanks in advanced.

Re: Mitel decrypt error

OtakarKlier — Wed, 24 Jun 2020 20:58:37 GMT

Hello,

I would say bypass decryption since the device is having issues with the certificates.

Regards,

Re: Mitel decrypt error

shawnhafen — Thu, 25 Jun 2020 18:30:04 GMT

Here to echo what @OtakarKlier said. We use the same shoretel/mitel phones and the zone they are in does not get decrypted. To take it a bit further you can use NAC to make sure only phones are on that vLAN too.

Re: Mitel decrypt error

cdcirexx — Thu, 25 Jun 2020 21:57:51 GMT

Thanks for the reply, we tried to bypass decryption, but that didn't work, we're now have other issues on our phones, like we can't get to voicemail, I'm trying to work with tac, but the engr seems to be not sure of what's happening.

Re: Mitel decrypt error

cdcirexx — Tue, 30 Jun 2020 16:01:19 GMT

So basically we can get the phones to call in and out but some buttons like the user directory or voicemail has issues, it will say connection failed or connection to server lost when pushing some of those buttons, we're not doing any decryption at this time. Waiting on TAC to follow up, their supposed to run packet captures.

Re: Mitel decrypt error

jbentivoglio — Wed, 12 Aug 2020 17:05:37 GMT

Was TAC able to solve this? I have some of the same issues, like connection to server lost.

Re: Mitel decrypt error

cdcirexx — Wed, 12 Aug 2020 21:07:43 GMT

Nope, I've had an open ticket for a month now, TAC has been puzzled by this, even after looking at packet caps, they had me upgrade to pan-os9, they're starting to think nothing's wrong with the firewall and could be something misconfigured or on the mitel side.

Re: Mitel decrypt error

ehacker1 — Wed, 14 Jul 2021 02:44:09 GMT

Does anyone have a resolution to this? I just started having this same issue out of the blue with Mitel IP phones... services such as voicemail, recent calls, and phone status changes are not working and new phones won't grab the configuration. I'm not doing decryption. If I place the phone physically outside of the firewall, it works fine.

Re: Mitel decrypt error

cdcirexx — Fri, 16 Jul 2021 17:08:47 GMT

Hi there,

What I did was app override for the ports on the mitel, and also under file blocking I created an allow rule for the mitel app to update