Allow external IP range and ports

Bradley 7 days ago

Hi all,

We are having a few problems with our VOIP phones. I believe it may be to the firewall, but I not 100% sure.

I need to allow an IP address range and some ports.

I have created a firewall rule, but I cannot see that any traffic being logged.

The firewall and firmware version is: XGS126 (SFOS 20.0.2 MR-2-Build378)

The IP range that needs to be allowed is: 185.110.180.xxx

The ports that need to be allowed are:

IPTKS: UDP 5588

Media: UDP 30000 - 60000

Here is what I have done so far:

Firewall rule:

Ports allowed:

Any help would be greatly appreciated.

Kind regards,

Bradley

Added TAGs
[edited by: Raphael Alganes at 2:57 PM (GMT -8) on 14 Nov 2024]

Top Replies

Vivek Jagad 6 days ago in reply to Bradley +1 suggested

Then the traffic would be simply from the local area network to cloud, so a LAN to WAN rule should help...

Parents

0 Vivek Jagad 7 days ago

Hi Bradley ,

Thank you for reaching out to the community, so the traffic here in the picture is WAN To LAN ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Vivek Jagad 7 days ago

Hi Bradley ,

Thank you for reaching out to the community, so the traffic here in the picture is WAN To LAN ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 Bradley 7 days ago in reply to Vivek Jagad

Hi Vivek,

Thank you for your response.

It is WAN to WAN. Should it be WAN to LAN?

Kind regards,

Bradley
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 7 days ago in reply to Bradley

I am trying to understand the traffic flow here, so it would be great if you can elaborate your network topology, what is the source and where is the source in the network topology, what is the destination and where is the destination in the network topology...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Bradley 6 days ago in reply to Vivek Jagad

Hi Vivek,

Just for your information, I have a basic understanding of networks, but I will try my best.

The source is an external server with an IP address of 185.110.180.xxx. This external IP needs to be accepted by Sophos. This then connects to a VOIP phone that we have. I believe this would be on our local area network.

Does this help?

Thanks,

Bradley
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Bharat J 6 days ago in reply to Bradley

May I know where is VOIP server hosted exactly ? on prim or on Cloud ?

on cloud -LAN-WAN firewall is enough

Regards

"Sophos Partner: Networkkings Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 6 days ago in reply to Bradley

So have you created a zone for your local area network ? if yes then behind which zone it is deployed to ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Bradley 6 days ago in reply to Bharat J

Hi Bharat,

It is located on the cloud. IP address range of 185:110.190.xxx

Thanks,

Bradley
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 6 days ago in reply to Bradley

Then the traffic would be simply from the local area network to cloud, so a LAN to WAN rule should help...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 Bharat J 6 days ago in reply to Bradley

Create a test firewall rule from LAN to WAN and keep on TOP with any service and check voice phone works or not

Regards

"Sophos Partner: Networkkings Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel