New 3CX install /Juniper Firewall / Firewall Checker fails

[yorkds]

We have a new install of 3CX on a Server 2008R2 box on VMware. The gateway is a Juniper SRX100 firewall. When I run the firewall checker everything fails however I can see on the firewall that there are sessions to port 5060.

I also have the following errors in the Server activity log "STUN server could not be reached"

I've configured static NAT between the public IP and the Private IP, the Windows Firewall has been switched off and I also tried a rule effectively putting the 3CX server IP into a DMZ but it still fails all tests.

I've followed the guide for ports to open as per below

application 5060tcp {
protocol tcp;
destination-port 5060;
}
application 5060udp {
protocol udp;
destination-port 5060;
inactivity-timeout 129600;
}
application 5090tcp {
protocol tcp;
destination-port 5090;
}
application 5090udp {
protocol udp;
destination-port 5090;
}
application 9000-9049 {
protocol udp;
destination-port 9000-9049;
inactivity-timeout 86400;
}
application 9000 {
protocol tcp;
destination-port 9000;
}
application 5000 {
protocol tcp;
destination-port 5000;

I'd really appreciate any advice, Thanks. Oliver.

 

[leejor]

Re: New 3CX install /Juniper Firewall / Firewall Checker fai

I'm assuming that you have read over this...

http://www.3cx.com/blog/voip-howto/firewall-configuration-overview/

Unfortunately, your specific firewall isn't mentioned, but, hopefully someone else has tried, and succeeded in making it work.

 

[bardissi]

Re: New 3CX install /Juniper Firewall / Firewall Checker fai

Some firewalls will not pass the firewall checker but work just fine with the port forwards.