Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 41 subscribers
  • Views 1433 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DAHUA CCTV NOT STREAMING ON DMSS APP ON REMOTE PHONE

TimothyWanume

After installing Sophos XGS2300, our client stopped viewing his Dahua CCTV remotely on his smartphone, the NVR is online in the AP but CCTV footage is not I dstreaming.

I did all the necessary port foward and ports are open
RTSP: 554
TCP: 37777
HTTP: 81

what could be the sissue



This thread was automatically locked due to age.
  • 0

    Assume you are using v20 at least? What does logviewer show for the attempted connections?

    please post a copy of your firewall and associated Nat.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0

    Hi TimothyWanume,

    Also post your service objects created attached on same DNAT firewall rules and NAT rules.

    Regards

    "Sophos Partner: Networkkings Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

  • 0

       
    See attached.
    Remember, the ports are open, and the nvr shows that it is online. but it cant stream on the remote cctv app


    DNAT Rules

    Firewall Rule

    SERVICES

    Some of the LOGS

  • 0 in reply to TimothyWanume

    Seems some ports still required to add on service object as per the denied logs 

    try to add tcp port 15100 under NVR service object 

    check drop packet and packet capture to get the destination port to allow it 

    From SSH option 4 

    console>tcpdump 'host <destination IP>

    console>dr 'host <destination IP>

    Drop packet will help you to get port/s which are getting drop to allow it 

    Also add LAN Zone on Source Zone on DNAT firewall rule to allow access on LAN with Public IP.

    Regards

    "Sophos Partner: Networkkings Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

Unfiltered HTML