Permitting SKYPE

We are trying to enabling the use of SKYPE through Firewall XG ( 16.01 ) .

We enabled all skype app in the application , all the *skype.com websites etc and the users gets the login page, they do the login and gets the skype pages but their status don't change to online UNLESS we also enable the "IP ADDRESS" category.

It happen , in fact , that skype at some point uses direct IP addressing and firewall seems not be able to understand that it's still "SKYPE" traffic and blocks it ( if that category is not enabled )

Is there a way to have Skype working WITHOUT opening the whole "IP ADDRESS " Category ?

thanks