Cisco Webex and Decrypt & scan HTTPS issue

I suspect you will need to add an application policy to your firewall rule to allow the webex application to work.

Ian

I have tried with none and the default "Block high risk" application options in the firewall rule.

It made no difference. I also see no blocked logs in the application logs while connecting to a webex.

Hi,

what rule does the log viewer show as the PC tries to connect. Ad a filter to your logviewer of the IP address of your PC.

Ian

Not too sure what you mean.

I have a firewall rule with an ID of 5. In the logs it either says firewall rule 5 or 0.

The ones matching rule 0 normally say 

However I only see green when i am connecting the audio.

Firewall rule 0 is the default firewall block/drop all. Basically it means your firewall rule has some filtering that the software doesn't like or does not match.

Please post a expanded copy of your firewall rule.

Ian

I have another rule that I did some testing with that just allowed any service to the WAN. Did not make any difference.

This is rule 5 - If i turn off the decrypt and scan https it all works fine.

I should mention right below this I have the following rule. So anything rejected should show up as a match to rule #12

Hi,

you don't need this rule, the firewall already has one.

For testing setup a rule at the top of your list.

Source LAN ,your PC IP address, destination WAN, any

MASQ.

Log traffic

Setup logviewer to display this rule using a filter.

Setup a call and see what traffic is passed, then display the results here.

Ian

O thanks I think I might be missing this. UDP 9000

 Adding port 9000 made no difference.

Are you using this with MS office cloud365?

If you have an "any" in the protocol/port list you would not need to add any ports, everything that is required to setup the connection should be allowed out.

I also see there is a UDP 443 which is Google QUIC. What I am not seeing is any SIP setup which I would expect for a VoIP type call?

Ian