Calls but no contacts/messaging outside LAN

[PrecRes]

Hi folks,

We have an on premises v18 standard server, running within a windows 10 VM. We recently upgraded our firewall to a cisco firepower 1120 unit. All rules and port forwards were migrated from the old firewall to the new one.
Now, the 3CX firewall check passes, and everything works fine within the network (which it should regardless), but once I leave, all of our users lose the ability to view contacts or messages. They can still receive calls, and make calls if they remember the number, but contacts and messages will never load.

Has anyone else had the same issue with Cisco FDM devices?


Any insight would be hugely appreciated

 

[cobaltit]

You said now the firewall check passes. Does that mean it wasn't passing before? Did you run the firewall check after the firewall swap? It something changed after, the firewall checker doesn't change from green to red unless it's run again.

But the explanation is simple. Remote clients use two ports. HTTPS (443 or 5001 typically) for presence, etc and then 5090 for calls. Your HTTPS is being blocked for some reason.

 

[NicholasP_3CX]

The firewall checker does not check the HTTPS port, but you can do a check for HTTPS connectivity via the Messaging page of 3CX.

If you don't already have a messaging configuration on 3CX, just click on "Add Facebook" and click on Test on the top of the page. This will test the HTTPS connection to the PBX. You do not need to actually configure Facebook, but just use the test functionality and then cancel the configuration.



Possible results:

HTTPS Open on Firewall:



HTTPS Closed on Firewall: