This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Appliance Access is Denied and Webex audio problems

Hi there,
Need your help and expertise.
We have an HA here with Sophos XGS2300 (SFOS 19.5.3 MR-3-Build652).
The following problem occurs in particular with Webex Audio / Video.

From external to internal and vice versa, the audio and video channel is established without any problems.
However, if the employees at the same location call each other directly, no audio/video channel is established.
Even if the corresponding firewall rule is set to Any / Any as a test.
No UDP is blocked by the DOS protection.

What we see is that almost at the same time there are "Appliance Access Denied" actions.

We do not have this behavior with MS Teams or any other VoIP provider.
We are currently at a loss as to what this could be.

Thanks for any help.
Stefan

This thread was automatically locked due to age.

Top Replies

LuCar Toni 7 months ago +1 suggested

Try to play with the SIP settings. Looks like Webex wants to do SIP: https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/FirewallRules/VoIPSIPModuleTurnOnOff…

Parents

+1 Vivek Jagad 7 months ago

Hi StefanS ,

Thank you for reaching out to the community, You can also try to prioritize this via SD = REF:Sophos Firewall: How to prioritize the traffic via SD-WAN for the applications

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 StefanS 7 months ago in reply to Vivek Jagad

Hi Vivek Jagad
Do you think the SD-WAN will help in this case? It looks like, when I look at "Appliance Acces", that the Webex client at the local site wants traffic directly via the external WAN IF back into the local network, i.e. without contacting the Webex Cloud.
I may be wrong here.
As already described, we have no such problems with MS Teams and other VoIP providers.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 7 months ago in reply to StefanS

It should, you can prioritize based on the application object or the ports used by Webex cloud...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad 7 months ago in reply to StefanS

It should, you can prioritize based on the application object or the ports used by Webex cloud...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data