3CX and XG 18 Configuration

Hi David Cook,

Thank you for reaching out to the Community! 

The first three steps outlined in the document are still valid for the SFOS v18 firmware, but the process to create a DNAT(Business application rule) has changed with the v18. 

You can find out more information about the DNAT rule on the following video and document: 

• XG Firewall (v18): NAT Enhancements
• Add a DNAT rule with server access assistant

Let us know if you need further assistance.

Thanks,

Setup the Firewall and DNAT.  The log shows the inbound connection as accepted but still unable to reach server.  My test was from external server IP on Port 5001.  Thank you for your assistance.  See image link only good for a month.  ibb.co/.../9N4QNn0:640:50] 

Hi Dave Cooke,

Thank you for the update! 

Did you see any reply from the server to the external connection request? What if the connection request is blocked/dropped post firewall? 

Did you unload the SIP module on your firewall? 

Thanks,

Good Morning,

Thanks for the responses!

After not seeing a capture from the external IP, WAN IP or FW IP I saw that the IP address on server was different when I logged on  locally.  I thought I changed the IP on the server which lead me in the wrong direction.

Thank you again for your responses and patience.

Dave