We have just upgraded our MSP management software, and the mechanism by which it establishes "tunnels" to remote computers has changed.
The new tunnel mechanism is using UDP hole punching, which isn't working. When I look at the logs, I see this:
IpA:PortA -> IpB:PortB
IpB:PortB+1 -> IpA:PortA+1
So it seems like it is relying on predictive NAT and is getting the ports wrong, the "hole" it thinks it is "punching" through the firewall at each end is off by 1 port number.
The documentation says something like that this is known to work well on cheap firewalls, but not so well on higher end firewalls, but doesn't really offer anything in the way of a resolution.
Has anyone been down this road before and could offer any suggestions?
thanks
James
This thread was automatically locked due to age.
