Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 507 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MeetAnyway / "Daily" meetings with peer to peer connections blocked as TOR proxy

LHerzog

Hi,

beside all the existing meeting tools, some of our users are starting to evaluate something called MeetAnyway.

This tool establishes peer to peer connections on high port ranges if there are less than 4 attendees. Described in the documentation attached as link.

I'd like to allow this traffic on the firewall but noticed that the traffic is blocked as application TOR browser beside beeing blocked by not yet opened ports. Is it possible to change this TOR detection?

2021-09-13 13:31:29 Application filtermessageid="17051" log_type="Content Filtering" log_component="Application" log_subtype="Denied" fw_rule_id="4" user="xxxxxx" user_group="xxxxx" appfilter_policy_id="5" category="Proxy and Tunnel" app_name="TOR Proxy" app_risk="5" app_technology="Client Server" app_category="Proxy and Tunnel" src_ip="172.16.2xx.xxx" src_country="R1" dst_ip="172.16.1xx.xxx" dst_country="R1" protocol="UDP" src_port="61305" dst_port="58650" bytes_sent="0" bytes_received="0" status="" message="" appresolvedby="Signature"

https://help.meetanyway.com/en/articles/4621143-advanced-configuration-for-corporate-firewalls-or-vpns

When you're in a call with 4 or fewer people, Daily uses direct peer-to-peer connections for your audio and video for maximum quality. When the fifth person joins, the call automatically switches to routing everyone's audio and video through a centralized Daily server.



This thread was automatically locked due to age.
Parents
  • +1

    Hello LHerzog,

    Thank you for contacting the Sophos Community.

    If the XG is detecting the application incorrectly, please open a case with Support with a pcap capture of the traffic and a screenshot of how the XG is seeing this category (same screenshot you shared in the community) as well as any documentation available, so Labs can update the Application Control categorization for this.

    Regards,

Reply
  • +1

    Hello LHerzog,

    Thank you for contacting the Sophos Community.

    If the XG is detecting the application incorrectly, please open a case with Support with a pcap capture of the traffic and a screenshot of how the XG is seeing this category (same screenshot you shared in the community) as well as any documentation available, so Labs can update the Application Control categorization for this.

    Regards,

Children