Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 5 subscribers
  • Views 2564 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM and Discord video/audio

Renaud Schweingruber

Hello,

I'm running an SG115 with 9.705-3 and I've been experimenting very bad audio and video quality on Discord. Even by disabling most services (IPS, WebFiltering, etc.), I still get it. I'm on a 1GB/100MB fiber connection on a 1GB LAN. As soon as I switch my computer to 4G connected to my mobile phone, I get a cristal clear video and audio quality from Discord.

Is Sophos aware of this ? Is there a workaround possible ?

Best Regards

Renaud



This thread was automatically locked due to age.

Top Replies

  • +3 verified

    I've found the following with Web Protection - Application Control. Sophos wrongly detects Discord RTC Audio connections as the app "imo.im" (a messenger app unrealted to Discord).

    The log shows this:

    Application-Control-Regel-Nr.12 imo.im a.a.x.y:52695 > 213.163.95.154:50006 len=301 ttl=127 tos=0x00
    Application-Control-Regel-Nr.12 imo.im a.a.x.y:52498 > 5.200.14.184:50002 len=315 ttl=127 tos=0x00

    After I've whitelisted "imo.im" in Application Control for all my hosts running Discord, the constantly repeating audio drops no longer occured. I'm back to crystal clear group conferencing.

    Jump to answer
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    Did you configure Anti-DoS/Flooding on your UTM? Could you please check that under Network Protection > Intrusion Protection > Anti-Dos/Flooding? 

    I would also suggest you provide packet filter logs for further investigation. 

    Thanks,

  • 0

    Salut Renaud and welcome to the UTM Community!

    As H_Patel suggests, this is likely due to Anti-DoS/Flooding UDP.  The following commands done at the command line will likely identify which traffic is causing blocks of many packets:

    grep 'UDP flood' /var/log/ips.log|grep -oP 'srcip=".*?" proto'|sort -n|uniq -c
    grep 'UDP flood' /var/log/ips.log|grep -oP 'dstport=".*?"'|sort -n|uniq -c

    Any luck with that?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • +1

    I've found the following with Web Protection - Application Control. Sophos wrongly detects Discord RTC Audio connections as the app "imo.im" (a messenger app unrealted to Discord).

    The log shows this:

    Application-Control-Regel-Nr.12 imo.im a.a.x.y:52695 > 213.163.95.154:50006 len=301 ttl=127 tos=0x00
    Application-Control-Regel-Nr.12 imo.im a.a.x.y:52498 > 5.200.14.184:50002 len=315 ttl=127 tos=0x00

    After I've whitelisted "imo.im" in Application Control for all my hosts running Discord, the constantly repeating audio drops no longer occured. I'm back to crystal clear group conferencing.

  • FormerMember
    0 FormerMember in reply to Polygon-tre

    Hi ,

    Thank you for sharing your solution with the Community! 

    Thanks,

  • 0 in reply to Polygon-tre

    Confirmed ! It did the job for me :) many thanks !