3CX PBX behind a PAN-500

[JCapron]

After about a week of trial and error, the Palo Alto Network engineers have told me that my PAN-500 does not support the 3CX phone system. I am told that a future feature request will resolve flow based NAT issue I am having with STUN traffic. Unfortunately, I have already bought the server and all new IP phones and the changeover is 2 weeks away.

After searching several technical sites for answer, including PAN and 3CX community sites, I can see references to other issues with IP phones, 3CX and PAN, so it seems like this setup is working somewhere. Does anyone have 3CX working behind a PAN firewall? Would you be willing to share rules / setup? Even if your setup is a work around, I might be able to limp along while Palo Alto works on feature request 3214, which is supposed to fix the problem.

Thanks, Jim

[Alex_Gomez]

Yes, we have one site with a PA200 running 3CX without any issues, PM me to discuss your current config and i can share our ruleset and config.

[JCapron]

Great! Thanks Alex. I will PM as soon as I determine how to do that. I can't find instructions on private messages here. I found the "powered by Lithium" tag and searched for the instructions over there. I have a support request into the PAN community which may be answered tomorrow.

Jim

[JCapron]

Alex - the support team told me that the private messaging feature is not enabled in PAN Live Community.  Are you on Spiceworks? If so, private messaging works there - I am jim9817.

[graphite]

Hi Alex

I'm in the same situation: in our office we have a PaloAlto 220 and we have the same issues with 3CX ... we tried all ideas we have but no positive results: ports are fowarded randomly... Then we have seen your post:  can you help me? Can you send me your working configuration?

Thank you very much in advance and have a great day.

Maurizio