3CX with a Palo NGFW

[mcrc]

Hello all,

I know this question has been asked before, but the solution provided did not work for me.

We are having issues with our 3CX on premise setup that is sitting behind a palo alto firewall. Basic functionality works, and after a lot of trial an error the phone system is semi operational. The issue is that when running the firewall checker, we get these results:


Also, when using the 3CX app, the online status, visual voicemail, team, and contacts do not appear when off the local network the server is on, but calls can still be made (Like when on LTE).





Any help or recommendations are greatly appreciated!

 

[SteveITS]

What ports have you forwarded?

 

[mcrc]

What ports have you forwarded?

9000-10999, 443,2197,5223,5090,5061,5060,5001,2528,2197

Ports are TCP or UDP depending on what the setup manual specified.

 

[VUSALDADASHOV]

Just translate required ports

 

[JasD]

9000-10999, 443,2197,5223,5090,5061,5060,5001,2528,2197

Ports are TCP or UDP depending on what the setup manual specified.

Are you using APP ID? If so, I would remove that to first allow the palo to identify what apps it is seeing.

 

[SteveITS]

9000-10999, 443,2197,5223,5090,5061,5060,5001,2528,2197

Ports are TCP or UDP depending on what the setup manual specified.

I'd review. 2197 and 2528 and 5223 are outbound not inbound, for example.

Do you have a firewall on the 3CX server? Is this Linux or Windows?

 

[bitn2]

I'd review. 2197 and 2528 and 5223 are outbound not inbound, for example.

Do you have a firewall on the 3CX server? Is this Linux or Windows?

Also not 443 AND 5001. Only the https port of your pbx.