Issues with teams calls

Hi BeEf

Please check the Application filter and Web filter Logs too.

Verify you have no issue with the existing web and application filter policy applied you may create a source IP  base firewall rule and keep on TOP of all the firewall rules and check Teams call is working or not 

Thanks and regards

in this topic I'd expect those packets to be out of order. So packets to a connection that has already closed between the two sides.

You need to dump that on XG and analyze that dump externally with wireshark.

What's the issue you're having with teams? I'm asking because we also have some: very unsharp and hanging video like this:

I've triple checked the Office 365 Exceptions are correct - they are fine.

Hu,

are you using SSL/TLS for this application, do you have the do not scan video and audio ticked?

Sometimes using an IP address as the source device does not work correctly, please try with a network or an address range.

Ian

Hello Bharat J,

doing a separate rule for one client is a strange suggestion as we want to handle all clients the same and a lot of clients have teams calls etc.

Maybe I am doing this for all my client networks instead. In what way would it be better to have such a rule on top instead of matching it later with the same criteria. I there any performance increase or higher Bandwidth then.

We use Webfilter allwow all or none. No SSL/TLS inspection for the network and no special Application filtering ...

Regards
BeEf

issues: We see brief interrupts in incoming audio and video. We are not sure about the other direction as this is not that easy to be recognized.

We also increased the UDP timeout to 500ms in order to open the return channel for UDP packets / answers coming from the internet. This helped but not in every case.

Endpoint Computer Capabilities (i.e., Legacy Hardware Issues) ...
Very new and performant hardware.

Background Processes and Open Apps that Reduce Computer Performance. ...
Unlikely. Checked AV updates, software updates, CPU Load.

Home Office Networking Issues. ...
Happens in office, high bandwith to internet 10 GBit Backbone, 1 GBit to the client

VPN Software Routing for Network Access. ...
Not in this case. For VPN software we use split tunnel in general.

Internet Service Provider (ISP) Performance Issues.

High & reserved bandwith. The only thing could be are maybe spikes that fly below the granularity of PRTG network monitoring. Maybe wrong priority of Teams packets.

Sometimes in the past we saw incoming packets blocked for some time. This resulted in almost similar behaviour  but was more widespread among clients.

BeEf is it possible you have these issues on Sophos endpoints with HTTPS decryption enabled? Because Ijust thought it could  not be a firewall but endpoint issue if it decrypts teams / skype communication. We decrypt on EP side. Did not check this furhter - just wanted to give an other hint what may be causing this.

I can tell you, if I'd need to maintain those Microsoft O365 Exceptions on the enpoints, I'd rather disable that still-not-ready feature there.