Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Issue Softphone / VoIP SSL VPN

Hi everybody,

i´m having a issue with the SSL VPN when using a softphone client. Our users are connecting via SSL VPN to a Citrix desktop where they use the softphone client. The sound qualitiy is very poor and i cant find any issue. When we use the softphone client internal in Citrix (without VPN) everything is working fine.

The other problem appears when a user is using the softphone directly on its notebook via VPN. The sound quality is okay, but the call dropps / disconnects after 20 seconds to 15 minutes. Does anyone have an idea? I´ve already tried these things:

system system_modules h323 unload

system system_modules sip unload

set advanced-firewall udp-timeout-stream 150

set ips sip_preproc disable

set vpn conn-remove-tunnel-up disable

Nothing changes Disappointed

Thanks for your ideas!!



This thread was automatically locked due to age.
Parents
  • Sounds like you covered the bases. So did you try them in that order, adding each one on top the others, or did you try them individually? I haven't tried VOIP over VPN, but I found that only adjusting the udp-timeout-stream was my solution. Everyone says to unload SIP, but it worked better with it loaded than not.  But it didn't work without increasing the stream timeout. (On the other hand, I don't know the ramifications of remote access in that use case.)

    It makes sense that running the VOIP client on a remote server could cause problems. VOIP isn't high-volume, but it is jitter-sensitive and I imagine Citrix is not super-concerned about things that contribute to jitter -- which the vast majority of Citrix-based apps don't care about. 

    What VPN client are you using on the notebook, and does it have any timeout settings? (I'm assuming that the XG SSL-VPN timeouts are larger than your 20-900 seconds.) Not that anything should be timing out, since the RTSP stream should keep things alive, but...

Reply
  • Sounds like you covered the bases. So did you try them in that order, adding each one on top the others, or did you try them individually? I haven't tried VOIP over VPN, but I found that only adjusting the udp-timeout-stream was my solution. Everyone says to unload SIP, but it worked better with it loaded than not.  But it didn't work without increasing the stream timeout. (On the other hand, I don't know the ramifications of remote access in that use case.)

    It makes sense that running the VOIP client on a remote server could cause problems. VOIP isn't high-volume, but it is jitter-sensitive and I imagine Citrix is not super-concerned about things that contribute to jitter -- which the vast majority of Citrix-based apps don't care about. 

    What VPN client are you using on the notebook, and does it have any timeout settings? (I'm assuming that the XG SSL-VPN timeouts are larger than your 20-900 seconds.) Not that anything should be timing out, since the RTSP stream should keep things alive, but...

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?