Share screen in skypeforbussiness not working

[soporteseguridad]

Hi,

We are facing a strange problem with Skypeforbusiness. Two users are in a conference. When the user behind Palo alto tries to share the screen is not working, but when the remote user shares the screen is working. 

The error in skype is "Skype for Business: We couldn’t connect to the presentation because of network issues"

In our PA is everything allowed. No policy denies. In pcap DROP we see this:

Is there any issue with the option "share screen" in skype4bussiness????

[kiwi]

Hi @soporteseguridad,

As per policy you might be allowing everything but that doesn't mean nothing is dropped.

I would recommend to configure a filter and check the global counters for more information :

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-check-global-counters-for-a-specific...

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Troubleshoot-Using-Counters-via-the-CL...

Cheers !

-Kiwi.

[soporteseguridad]

Yes i know, doing this filter is hard. Because the users create a meeting using skype4business, when the meeting is created, one of this user tries to share the desktop. So I'm not sure who would be the source and destination for this filter.

I undertand that source would be my end-user, ¿but the destinations of this flow for sharing screen? ¿skype cloud?¿remote user?

[OtakarKlier]

Hello,

Also Skype does not like to be decrypted, so if you are doing ssl decrypt, you might want to put in a bypass policy.

Regards,

[soporteseguridad]

Thanks a lot. Problem was in MineMeld. The feed did not have this web to share screen. We added this web manually in allow list and its working.

thanks a lot