Migrating from SonicWall to OPNsense

[Ted.D]

Greetings,

I am working at migrating from our SonicWall (old Gen5) to a new OPNsense router/firewall (OPNsense 21.7.2_1-amd64). I'm having trouble getting the 3CX firewall checker to run without failures. The main problem appears to be with source NAT. The errors all take the form of "testing port x... Mapping does not match x. Mapping is y. (How to resolve?)".

On the SonicWall, the solution was to navigate to Network | NAT Policies, edit the outbound NAT Policy for the 3CX PBX, and check Disable Source Port Remap on the Advanced tab.

The corresponding setting in OPNsense appears to be under Firewall | NAT | Outbound. I have set hybrid mode for NAT rule generation, and I have a rule for all network traffic from the 3CX PBX with Static port set to Yes.

This appears to agree with the information I have found online, but the 3CX firewall checker is still unhappy. Grateful for any suggestions.

Thanks,
Ted

 

[ChrisC_3CX]

but the 3CX firewall checker is still unhappy. Grateful for any suggestions.

The firewall checker merely reports the results based on what is seen in the sent and received traffic during the test. That said, if you still get the same errors then probably nothing changed with the new configuration or something else also needs to be adjusted.

I can't recommend anything specific for this firewall, but, it sounds like you need to find a way to achieve port preservation. Port remapping is one feature that might be causing this but there may be some other functionality on your firewall that might also be contributing to this.

You might want to consider taking a look at our documentation that explains how the firewall checker works so that you can hopefully figure out what might be causing the failure: https://www.3cx.com/docs/firewall-checker/

 

[Saqqara]

I know this is not open sense but pfsense settings may point you tin the correct direction https://www.3cx.com/docs/pfsense-firewall/