This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM, zoom, and ips exclusions

Zoom has an extensive list of ip ranges to allow for port 80/443 access - https://support.zoom.us/hc/en-us/articles/201362683-Network-firewall-or-proxy-server-settings-for-Zoom

What I'm seeing is when a zoom session is present, top shows snort up at the top with 1-2% cpu (4 vcores assigned). Without manually pasting each ip/cidr as a separate network or host, is there an easy way to just past the whole list into a single entry?

This thread was automatically locked due to age.

Parents

0 BAlfson over 3 years ago

Have you tried a UDP Flooding Exception for LAN traffic to 134.224.0.0/19?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 3 years ago

Have you tried a UDP Flooding Exception for LAN traffic to 134.224.0.0/19?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Jay Jay over 3 years ago in reply to BAlfson

Negative. No need. "Use UDP Flood Protection" is disabled. How did you arrive at that ip?

My understanding is each zoom session will choose a random proxy server to use, so it seems the most logical choice is to add them all to a white list, preferably not one at a time.

FWIW, i'm almost tempted to turn off ITP. In the last there years there may have been 1 or 2 hits, of which both were false positives.

Unrelated, why am I not receiving email notifications of replies to subscribed threads? This has been going on for some time. If I forget to log in periodically I miss replies.

Looks like a feature request like this was already made https://ideas.sophos.com/forums/17359-utm-formerly-asg-feature-requests/suggestions/225818-webadmin-export-import-of-network-definitions ..... OVER A DECADE AGO!
Cancel
Vote Up 0 Vote Down

Cancel
0 Furry Unicorn over 3 years ago in reply to Jay Jay

Thanks for sharing useful information with us.. It really helpful to me.. I always prefer to read the quality content and this thing I found in you post. thanks for sharing with us..
Cancel
Vote Up 0 Vote Down

Cancel