Hosted 3CX Not Working With SonicWall

[fmaraschi]

We are trying to move over from a WatchGuard Firewall to a SonicWall using this guide:

https://www.3cx.com/docs/sonicwall-firewall-configuration/

For some reason, the phones can not communicate to the outside and we are unable to access the portal from the outside. Traffic is not flowing and we can't figure it out. We host our 3CX on-premise.

Any help would be appreciated!

 

[JohnS_3CX]

Hi,

Go ahead and read the below, and provide us with some more info so we can better understand how the system and phones are deployed in your environment
https://www.3cx.com/community/threads/information-to-provide-when-requesting-help.67558/

 

[fmaraschi]

We are trying to move over from a WatchGuard Firewall to a SonicWall using this guide:

https://www.3cx.com/docs/sonicwall-firewall-configuration/

For some reason, the phones can not communicate to the outside and we are unable to access the portal from the outside. Traffic is not flowing and we can't figure it out. We host our 3CX on-premise.

Any help would be appreciated!

• 3CX Version, Professional Perpetual 16.0.9
• Server OS, Debian 9
• Is the 3CX Server Hosted and where? On-premises
• IP Phone Make/Model/Firmware version, Yealink T38 38.70.0.228
• Provisioning Method: Local / STUN
• Trunk Provider or VoIP Gateway Make/Model, Nexvortex - US
• Has the Firewall Checker passed: NO
• Are custom Phone Templates being used: NO

 

[jaywagener]

What errors are showing up after running the firewall checker?

 

[fmaraschi]

Unfortunately I do not have a screenshot, but basically shows that most/if not all the ports are closed

 

[jaywagener]

Ok, that is most likely your issue. These ports will need to be opened to the 3CX to proceed.

 

[fmaraschi]

Correct. I followed 3CX's guide on opening up the ports and it did not work

 

[jaywagener]

Ok, short of getting into your Sonicwall to confirm that these ports are open, the firewall checker is the best method to verify that the 3CX can communicate with the outside world. There are a number of ports that need to be opened/NAT'd, as well as disabling SIP ALG. If this is not done, the system will not work. Just to confirm, have you looked over this link regarding resolving firewall issues?

https://www.3cx.com/docs/troubleshooting-firewall-checker/

Ports needed to be allowed through the firewall for 3CX:

https://www.3cx.com/docs/ports/

Thanks