Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

web skype on utm9

Hi,

I have a problem using skype through my sophos firewall... I can connect but not phone neither use webcam...

Nothing is logged as "blocked" in the webfilter log file... Also, I have created custom skype filter to allow traffic from a list of url I found on sophos' forums... But nothing changed.. Could you please help me ? Does anyone ever tried to use the web version of skype ? Or can you tell me how to know what exactly is blocked ?

Thanks in advance,



This thread was automatically locked due to age.
Parents
  • Hi,

    What mode is configured for Web Protection? Verify if anything associated to Skype is dropped in packetfilter.log.

    Create an exception for Skype URLs.

    Thanks

  • I,

    my firewall is configured as "normal" . Here is the list i allow :

    ^https://(111\.221\.74\.)([0-9]{1,3})
    ^https://(111\.221\.77\.)([0-9]{1,3})
    ^https://(157\.55\.130\.)([0-9]{1,3})
    ^https://(157\.55\.235\.)([0-9]{1,3})
    ^https://(157\.55\.56\.)([0-9]{1,3})
    ^https://(157\.56\.52\.)([0-9]{1,3})
    ^https://(213\.199\.179\.)([0-9]{1,3})
    ^https://(64\.4\.23\.)([0-9]{1,3})
    ^https://(65\.55\.223\.)([0-9]{1,3})
    ^https://(91\.190\.218\.)([0-9]{1,3}
    ^https://(90\.48\.45\.)([0-9]{1,3})
    ^http?://([A-Za-z0-9.-]*\.)?skype\.com/
    ^http?://([A-Za-z0-9.-]*\.)?skypeassets\.com/
    ^http?://browser.pipe.aria.microsoft.com/
    ^https?://clientconfig.microsoftonline-p.net
    ^https?://nexus.officewebapps.live.com
    ^https?://TENANT-NAME.onmicrosoft.com
    ^https?://[^.]*\.office.live.com
    ^https?://[^.]*\.office.net
    ^https?://[^.]*\.infra.lync.com
    ^https?://[^.]*\.online.lync.com
    ^https?://[^.]*\.lync.com
    ^https?://[^.]*\.office365.com
    ^https?://[^.]*\.microsoftonline.com
    ^https?://[^.]*\.outlook.com
    ^https?://[^.]*\.office.com
    ^https?://[^.]*\.skype.com

    actually, i've looked everywhere in utm9 and i can't find "packetfilter.log"... If you are talking about a file I must read with a ssh login, let me know, I can do it..

    Thanks for the answer

  • Hi Christopher,

    If the exceptions are already configured and working as required, I think the Skype has a different issue. 

    Ah apologies, take SSH to UTM and got to var/log directory.

    Execute tail -f packetfilter.log | grep xyz(xyz = host, skype, source IP)

    Thanks

Reply Children