Zoom phone custom signature thru: ssl-req-chello-sni

[R.Tudon]

Hi everyone!

We are currently moving our phone system to zoom, and we had an issue with the zoom application, some of their traffic its categorized as an incomplete causing that some calls hang out, or don't ring, I made an custom application, using the signature ssl-req-chello-sni and pasting the complete server's name that was registred in that drop package, this actually did work, but i wanted to make it dynamic, it's probably that specific server changes the name, but it ends with zoom.us,

If i type *.zoom.us, would work? or what it's the best practice?

[PavelK · Accepted solution]

Hello @R.Tudon

Palo Alto has hosted EDL for Zoom (Zoom Phone has own EDL as well): Edl Hosting Service. Here is a reference in documentation to set it up: Create an External Dynamic List Using the EDL Hosting Service. Using Zoom IPv4 EDL and Zoom URL EDL in a policy might be easier to setup and maintain compared it to configuring custom app-id.

Regarding URLs, you should configure these:

zoom.us/
*.zoom.us/

Kind Regards

Pavel