Full Cone NAT

[DrainBamaged]

New 3CX server setup in a branch office. Firewall rules are set per the docs to allow the following ports to the phone server:

TCP - 5001, 5060, 5061, 5090
UDP - 5060, 5090, 9000 to 10999

SIP-ALG is off. Yet the full cone NAT tests fail. What am I missing?

 

[eddv123]

To confirm this is an on-premise with local firewall ? which brand if so?

Check the local network perhaps and see that you arent using double -NAT (with router in from ITSP perhaps) or Windows firewall on the server ?

 

[Saqqara]

What is the network setup. i.e. what make and model of firewall.

 

[DrainBamaged]

On-prem server and FW. Windows firewall is turned off.
Palo Alto v9