Firewall Test Fails but SIP Works

[Robert Juric]

I'm trying to to get my Firewall Test to pass, mostly just because it annoys me that it's failing. I have a Static 1:1 NAT configured for my 3CX server, and firewall rules permitting the traffic. Inbound SIP works without issues. However I keep failing the "Full Cone Test". I have a Juniper SRX firewall securing the network.

What exactly is the "Full Cone" test and why would it still be failing with a 1:1 static NAT?

 

[MRM]

Hi Robert,

Can you confirm what ports are not passing the test?

Regards,

 

[Robert Juric]

All of the ports are failing. 5060, 5090, and the 9000-9255. I'm not seeing denies in my traffic logs.

 

[MRM]

Have a look through this page; https://www.3cx.com/blog/voip-howto/static-port-mappings/ for a better understanding for Full Cone NAT.

Not familiar with the Juniper firewall so maybe someone else from the community can help on that front.