• V20: 3CX Re-engineered. Get V20 for increased security, better call management, a new admin console and Windows softphone. Learn More.

Anybody using Checkpoint with 3CX - "ACK is not received"

Status
Not open for further replies.

zoomzoomvince

Joined
Jul 31, 2008
Messages
19
Reaction score
0
Hi All,

I've been using 3CX v10 with a Zywall USG-200 now for some months and it has been rock solid and reliable. We were taken over by another company recently and the USG-200 has been replaced by a Checkpoint UTM-1 device which I no longer have control over.

What I have noticed is that after 30 seconds calls are dropped after and ACK error.

14:49:40.161|.\InviteADS.cpp(545)|Log2||InviteADS::eek:nAckNotReceived:[CM503021]: Call(2): ACK is not received<br>

I then ran the firewall checker and it looks like there are translation errors.

3CX Firewall Checker, v1.0. Copyright (C) 3CX Ltd. All rights reserved.

<08:23:15>: Phase 1, checking servers connection, please wait...
<08:23:15>: Stun Checker service is reachable. Phase 1 check passed.
<08:23:15>: Phase 2a, Check Port Forwarding to UDP SIP port, please wait...
<08:23:17>: UDP SIP Port is set to 5060. Response received correctly with no translation. Phase 2a check passed.

<08:23:17>: Phase 2b. Check Port Forwarding to TCP SIP port, please wait...
<08:23:19>: TCP SIP Port is set to 5060. Response received correctly with no translation. Phase 2b check passed.

<08:23:19>: Phase 3. Check Port Forwarding to TCP Tunnel port, please wait...
<08:23:21>: TCP TUNNEL Port is set to 5090. Response received WITH TRANSLATION 41105::5090. Phase 3 check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/

<08:23:21>: Phase 4. Check Port Forwarding to RTP external port range, please wait...
<08:23:28>: UDP RTP Port 9000. Response received WITH TRANSLATION 41106::9000. Phase 4-01 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:29>: UDP RTP Port 9001. Response received WITH TRANSLATION 41107::9001. Phase 4-02 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:31>: UDP RTP Port 9002. Response received WITH TRANSLATION 41108::9002. Phase 4-03 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:32>: UDP RTP Port 9003. Response received WITH TRANSLATION 41109::9003. Phase 4-04 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:34>: UDP RTP Port 9004. Response received WITH TRANSLATION 41110::9004. Phase 4-05 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:35>: UDP RTP Port 9005. Response received WITH TRANSLATION 41111::9005. Phase 4-06 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:37>: UDP RTP Port 9006. Response received WITH TRANSLATION 41112::9006. Phase 4-07 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:38>: UDP RTP Port 9007. Response received WITH TRANSLATION 41113::9007. Phase 4-08 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:40>: UDP RTP Port 9008. Response received WITH TRANSLATION 41114::9008. Phase 4-09 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:41>: UDP RTP Port 9009. Response received WITH TRANSLATION 41115::9009. Phase 4-10 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:43>: UDP RTP Port 9010. Response received WITH TRANSLATION 41116::9010. Phase 4-11 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:45>: UDP RTP Port 9011. Response received WITH TRANSLATION 41117::9011. Phase 4-12 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:46>: UDP RTP Port 9012. Response received WITH TRANSLATION 41118::9012. Phase 4-13 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:48>: UDP RTP Port 9013. Response received WITH TRANSLATION 41119::9013. Phase 4-14 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:49>: UDP RTP Port 9014. Response received WITH TRANSLATION 41120::9014. Phase 4-15 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:51>: UDP RTP Port 9015. Response received WITH TRANSLATION 41121::9015. Phase 4-16 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:52>: UDP RTP Port 9016. Response received WITH TRANSLATION 41122::9016. Phase 4-17 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:54>: UDP RTP Port 9017. Response received WITH TRANSLATION 41123::9017. Phase 4-18 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:55>: UDP RTP Port 9018. Response received WITH TRANSLATION 41124::9018. Phase 4-19 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:57>: UDP RTP Port 9019. Response received WITH TRANSLATION 41125::9019. Phase 4-20 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:23:58>: UDP RTP Port 9020. Response received WITH TRANSLATION 41126::9020. Phase 4-21 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:00>: UDP RTP Port 9021. Response received WITH TRANSLATION 41127::9021. Phase 4-22 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:01>: UDP RTP Port 9022. Response received WITH TRANSLATION 41128::9022. Phase 4-23 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:03>: UDP RTP Port 9023. Response received WITH TRANSLATION 41129::9023. Phase 4-24 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:04>: UDP RTP Port 9024. Response received WITH TRANSLATION 41130::9024. Phase 4-25 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:06>: UDP RTP Port 9025. Response received WITH TRANSLATION 41131::9025. Phase 4-26 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:08>: UDP RTP Port 9026. Response received WITH TRANSLATION 41132::9026. Phase 4-27 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:09>: UDP RTP Port 9027. Response received WITH TRANSLATION 41133::9027. Phase 4-28 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:11>: UDP RTP Port 9028. Response received WITH TRANSLATION 41134::9028. Phase 4-29 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:12>: UDP RTP Port 9029. Response received WITH TRANSLATION 41135::9029. Phase 4-30 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:14>: UDP RTP Port 9030. Response received WITH TRANSLATION 41136::9030. Phase 4-31 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:15>: UDP RTP Port 9031. Response received WITH TRANSLATION 41137::9031. Phase 4-32 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:17>: UDP RTP Port 9032. Response received WITH TRANSLATION 41138::9032. Phase 4-33 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:18>: UDP RTP Port 9033. Response received WITH TRANSLATION 41139::9033. Phase 4-34 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:20>: UDP RTP Port 9034. Response received WITH TRANSLATION 41140::9034. Phase 4-35 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:22>: UDP RTP Port 9035. Response received WITH TRANSLATION 41141::9035. Phase 4-36 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:23>: UDP RTP Port 9036. Response received WITH TRANSLATION 41142::9036. Phase 4-37 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:25>: UDP RTP Port 9037. Response received WITH TRANSLATION 41143::9037. Phase 4-38 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:26>: UDP RTP Port 9038. Response received WITH TRANSLATION 41144::9038. Phase 4-39 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:28>: UDP RTP Port 9039. Response received WITH TRANSLATION 41145::9039. Phase 4-40 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:29>: UDP RTP Port 9040. Response received WITH TRANSLATION 41146::9040. Phase 4-41 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:31>: UDP RTP Port 9041. Response received WITH TRANSLATION 41147::9041. Phase 4-42 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:32>: UDP RTP Port 9042. Response received WITH TRANSLATION 41148::9042. Phase 4-43 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:34>: UDP RTP Port 9043. Response received WITH TRANSLATION 41149::9043. Phase 4-44 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:35>: UDP RTP Port 9044. Response received WITH TRANSLATION 41150::9044. Phase 4-45 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:37>: UDP RTP Port 9045. Response received WITH TRANSLATION 41151::9045. Phase 4-46 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:39>: UDP RTP Port 9046. Response received WITH TRANSLATION 41152::9046. Phase 4-47 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:40>: UDP RTP Port 9047. Response received WITH TRANSLATION 41153::9047. Phase 4-48 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:42>: UDP RTP Port 9048. Response received WITH TRANSLATION 41154::9048. Phase 4-49 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/
<08:24:43>: UDP RTP Port 9049. Response received WITH TRANSLATION 41155::9049. Phase 4-50 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/

Application exit code is 51

Looking at some other posts on this forum it seems that the firewall is obviously mis-configured and probably a PAT/NAT issue. Does anybody have any pointers on settings for a Checkpoint UTM-1 so that I can direct these guys in the right direction.
 
Re: Anybody using Checkpoint with 3CX - "ACK is not received

this firewall has something called: SmartDefense Categories
This must be disabled for VoIP.
Read here: http://www.scribd.com/doc/57472040/85/SmartDefense-Categories#outer_page_495
 
Status
Not open for further replies.

Getting Started - Admin

Latest Posts

Forum statistics

Threads
141,629
Messages
748,940
Members
144,743
Latest member
Tammy_53
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.