Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 7 subscribers
  • Views 5949 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Microsoft Teams - Bad Network Quality

SREESHARAD

Hello All,

I am new to this forum and would like to seek help on a particular issue my colleagues are facing when attending Microsoft Teams conference calls while at the office which has Sophos UTM 9 controlling the Internet traffic. While at home due to WFH measures, they don't face the following issues.

A) There are multiple users' attending the same conference call from the same office network and outside from other countries and the below error message is displayed for the colleagues at my office.

B) Unable to see the screen that is shared by the participants

C) Voice keeps breaking

D) Overall, it appears audio/video quality is degraded even though we use a business grade broadband connection.

The applications related to Skype and Teams have been included in the QoS rules with dedicated bandwidth allocation, but that does not seem to make any difference.

Any idea why this could be happening?

Much appreciate any assistance.

Thanks

Sharad



This thread was automatically locked due to age.
Parents
  • 0

    You may want to read through this particular forum post, as it has a lot of information that might help:  Call quality issues with Teams - Network Protection: Firewall, NAT, QoS, & IPS - UTM Firewall - Sophos Community

    It's about a year old but has a ton of information.  We don't know what UTM version you have or if you are running it on your own hardware or a Sophos hardware product, your configurations; of course, that can affect how things go with this kind of traffic.

    OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
    (Former Sophos UTM Veteran, Former XG Rookie)

  • 0 in reply to Amodin

    Thanks Amodin for the forum post link. Here are the details of the Sophos 135 hardware device.

    Firmware release: 9.707005

    After reviewing the information in the forum post and some others, I have tried to configure as follows based on what I understood, a Firewall rule and an Intrusion Prevention rule. I have yet to monitor the logs, but thought I had share it here, much appreciate if you could help review if it's done correctly.

    A) Firewall Rule

    We have two networks - Guest and Internal, we would want Teams users' to seamlessly connect to the 3 Teams network using the path defined for the service endpoints. 

    B) Intrusion Prevention

    My understanding from the forum posts indicated that skipping checks on UDP Flood Protection worked, hence I have configured accordingly, but I am unsure if I got the direction of traffic 3478:3481 --> 1:65535, where it's meant to reverse but it's same as the MS-Office (Teams) under Services in the Firewall section screenshot above.

    I referred the configuration from the following post where had recommended and had confirmed it worked for him.

    https://community.sophos.com/utm-firewall/f/general-discussion/120563/utm---microsoft-teams

    I also referred the Microsoft documentation to try and understand Office 365 URLs and IP address ranges related to Skype for Business and Teams.

    https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&source=docs

    Much appreciate for your assistance, any advise would be appreciated.

    Thanks and best regards,

    Sharad

  • 0 in reply to SREESHARAD

    Hi 

    Could you please assist on this?

    Much appreciate it!

    Thanks

    Sharad

    ==========================================================================

    Thanks Amodin for the forum post link. Here are the details of the Sophos 135 hardware device.

    Firmware release: 9.707005

    After reviewing the information in the forum post and some others, I have tried to configure as follows based on what I understood, a Firewall rule and an Intrusion Prevention rule. I have yet to monitor the logs, but thought I had share it here, much appreciate if you could help review if it's done correctly.

    A) Firewall Rule

    We have two networks - Guest and Internal, we would want Teams users' to seamlessly connect to the 3 Teams network using the path defined for the service endpoints. 

    B) Intrusion Prevention

    My understanding from the forum posts indicated that skipping checks on UDP Flood Protection worked, hence I have configured accordingly, but I am unsure if I got the direction of traffic 3478:3481 --> 1:65535, where it's meant to reverse but it's same as the MS-Office (Teams) under Services in the Firewall section screenshot above.

    I referred the configuration from the following post where  had recommended and  had confirmed it worked for him.

    https://community.sophos.com/utm-firewall/f/general-discussion/120563/utm---microsoft-teams

    I also referred the Microsoft documentation to try and understand Office 365 URLs and IP address ranges related to Skype for Business and Teams.

    https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&source=docs

    Much appreciate for your assistance, any advise would be appreciated.

    Thanks and best regards,

    Sharad

Reply
  • 0 in reply to SREESHARAD

    Hi 

    Could you please assist on this?

    Much appreciate it!

    Thanks

    Sharad

    ==========================================================================

    Thanks Amodin for the forum post link. Here are the details of the Sophos 135 hardware device.

    Firmware release: 9.707005

    After reviewing the information in the forum post and some others, I have tried to configure as follows based on what I understood, a Firewall rule and an Intrusion Prevention rule. I have yet to monitor the logs, but thought I had share it here, much appreciate if you could help review if it's done correctly.

    A) Firewall Rule

    We have two networks - Guest and Internal, we would want Teams users' to seamlessly connect to the 3 Teams network using the path defined for the service endpoints. 

    B) Intrusion Prevention

    My understanding from the forum posts indicated that skipping checks on UDP Flood Protection worked, hence I have configured accordingly, but I am unsure if I got the direction of traffic 3478:3481 --> 1:65535, where it's meant to reverse but it's same as the MS-Office (Teams) under Services in the Firewall section screenshot above.

    I referred the configuration from the following post where  had recommended and  had confirmed it worked for him.

    https://community.sophos.com/utm-firewall/f/general-discussion/120563/utm---microsoft-teams

    I also referred the Microsoft documentation to try and understand Office 365 URLs and IP address ranges related to Skype for Business and Teams.

    https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&source=docs

    Much appreciate for your assistance, any advise would be appreciated.

    Thanks and best regards,

    Sharad

Children
Unfiltered HTML