Skype is not working in Sophos XG210

Question

Hi, 
 
 I want to allow skype messenger(non business) to LAN. Block other access to LAN. How to achieve this? 
 Tried whitelisted below domains and allow http, https and dns ports, not working 
 conn.skype.com api.skype.com pipe.skype.com gateway.messanger.live.com download.skype.com metrics.skype.com www.skypeassets.com static.skypeassets.com registrar-rr.prod.registrar.skype.com config.edge.skype.com prod.registrar.skype.com location.live.net vo.msecnd.net www.auslogics.com wns.windows.com ocsp.msocsp.com vassg142.ocsp.omniroot.com amsg.skype.com adc.trouter.io gfx.login.live.com msagfx.live.com clientconfig.passport.net msagfx.live-int.com auth.gfx-int.ms gfx.login.live-int.com clientconfig.passport-int.net auth.gfx.ms login.live.com 
 8.8.8.8

Am using Sophos XG210 SFOS 19.0.1 MR-1-Build365

LHerzog · Answer

you need more than https exceptions. you need to allow the Audio Ports to the Skype IP Ranges. Follow 
 https://endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7

Erick Jan · Answer

Hi Mahadevan, 
 Thank you for contacting Sophos Community. 
 Have you tried the following KB, kindly refer to the link below. 
 support.sophos.com/.../KB-000038702

Vivek Jagad · Answer

You can add the following regex exception:

^([A-Za-z0-9.-]*\.)?api\.skype\.com/
^([A-Za-z0-9.-]*\.)?pipe\.skype\.com/
^([A-Za-z0-9.-]*\.)?gateway\.messanger\.live\.com/
^([A-Za-z0-9.-]*\.)?download\.skype\.com/
^([A-Za-z0-9.-]*\.)?metrics\.skype\.com/
^([A-Za-z0-9.-]*\.)?www\.skypeassets\.com/
^([A-Za-z0-9.-]*\.)?static\.skypeassets\.com/
^([A-Za-z0-9.-]*\.)?registrar-rr\.prod\.registrar\.skype\.com/
^([A-Za-z0-9.-]*\.)?config\.edge\.skype\.com/
^([A-Za-z0-9.-]*\.)?prod\.registrar\.skype\.com/
^([A-Za-z0-9.-]*\.)?location\.live\.net/
^([A-Za-z0-9.-]*\.)?vo\.msecnd\.net/
^([A-Za-z0-9.-]*\.)?www\.auslogics\.com/
^([A-Za-z0-9.-]*\.)?wns\.windows\.com/
^([A-Za-z0-9.-]*\.)?ocsp\.msocsp\.com/
^([A-Za-z0-9.-]*\.)?vassg142\.ocsp\.omniroot\.com/
^([A-Za-z0-9.-]*\.)?amsg\.skype\.com/
^([A-Za-z0-9.-]*\.)?adc\.trouter\.io/
^([A-Za-z0-9.-]*\.)?gfx\.login\.live\.com/
^([A-Za-z0-9.-]*\.)?msagfx\.live\.com/
^([A-Za-z0-9.-]*\.)?clientconfig\.passport\.net/
^([A-Za-z0-9.-]*\.)?msagfx\.live-int\.com/
^([A-Za-z0-9.-]*\.)?auth\.gfx-int\.ms/
^([A-Za-z0-9.-]*\.)?gfx\.login\.live-int\.com/
^([A-Za-z0-9.-]*\.)?clientconfig\.passport-int\.net/
^([A-Za-z0-9.-]*\.)?auth\.gfx\.ms/
^([A-Za-z0-9.-]*\.)?login\.live\.com/

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.

Skype is not working in Sophos XG210

Top Replies