Sophos Firewall

Discussions 3cx full cone on XG 135

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 15 replies
Answers 1 answer
Subscribers 30 subscribers
Views 4349 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

3cx full cone on XG 135

Stefano Sorrentino over 3 years ago

Guys i´m getting crazy.....

What i am doing wrong?

DNAT Rule done

SIP ALG deactivated

SNAT connected to the DNAT with MASQ

any ideas?

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 3 years ago

Hi,

you would only need a mask rule because the 3cx will setup the connections. What is firewall rule and please include detail port lidtings.

ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Stefano Sorrentino over 3 years ago in reply to rfcat_vk

Hi Ian,

thank you for the reply

Here we are:

3CX_TCP includes

3CX_UDP includes
Cancel
Vote Up 0 Vote Down

Cancel
0 Peter-Paul Gras over 3 years ago in reply to Stefano Sorrentino

Hi Stefano. I also run a VOIP PBX behind my Sophos XG.
One incoming NAT rule, one outgoing rule.

SFVH (SFOS 19.5.1 MR-1-Build278) - Last (re)boot on Februari 20 2023

Asus H410i-plus - Pentium 6605 Gold - 250GB M.2 PCIe NVMe SSD - 8GB - 3 ports

[If any of my posts are helpful to you please use the 'Verify Answer' link]
Cancel
Vote Up 0 Vote Down

Cancel
0 Stefano Sorrentino over 3 years ago in reply to Peter-Paul Gras

Hi Peter thank you are you using a 3CX PBX? if yes your firewall check on the 3CX interface is all green?
Cancel
Vote Up 0 Vote Down

Cancel
0 Peter-Paul Gras over 3 years ago in reply to Stefano Sorrentino

No i do not use 3cx

SFVH (SFOS 19.5.1 MR-1-Build278) - Last (re)boot on Februari 20 2023

Asus H410i-plus - Pentium 6605 Gold - 250GB M.2 PCIe NVMe SSD - 8GB - 3 ports

[If any of my posts are helpful to you please use the 'Verify Answer' link]
Cancel
Vote Up 0 Vote Down

Cancel
0 Stefano Sorrentino over 3 years ago in reply to Peter-Paul Gras

Solved....

i have only a problem with the port 5060 but i think that is the FrtizBox modem the responsable...i have already open a support ticket.

Anyway, to solve the problem, i had to delete and rebuild the DNAT rule
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 3 years ago in reply to Stefano Sorrentino

You might like to review your port 5060 configuration, you have it twice TCP and UDP, the 5060 to 5060 is not required.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 3 years ago in reply to Stefano Sorrentino

You might like to review your port 5060 configuration, you have it twice TCP and UDP, the 5060 to 5060 is not required.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data

Share Feedback

×

Submitted a Tech Support Case lately from the Support Portal?