False positive SonicWall App Control Blocking 3CX Tunnel

[jcostlow]

Our customers started having issues with the webclient and softphone and upon checking the issue we saw that the SonicWall App Control is blocking the 3CX tunnel protocol. I have disabled AppControl for now.

 

[TheodorosG_3CX]

Hello @jcostlow and thank you for bringing this to our attention.
Note that this is a specific firewall feature which also depends on rules and policies configurations. In general this will identify UDP encrypted packets and block them. Have you also contact Sonicwall to clarify further the exact reason for blocking 3CX Encrypted UDP packets?

 

[jcostlow]

I have made ticket 44404776 with SonicWall and will update once I hear back. I was just bringing it up as we haven't made any changes to our AppControl settings and their database is now flagging it as UltraSurf.

 

[TheodorosG_3CX]

Thank you for the update. Most probably they will request some logs from your side to check further. We will also contact vendor from our side and request for further clarification. Let us know for any update.

 

[TheodorosG_3CX]

Hello @jcostlow was there any update from the vendor?

 

[TheodorosG_3CX]

@jcostlow Have you received any update?

 

[TheodorosG_3CX]

@jcostlow After further communication with SonicWall we have been informed that they will need an update with the requested logs in order to proceed. Let us know once you have an update.

 

[TheodorosG_3CX]

We are marking this alert as False Positive, as we have not received any confirmation from the Vendor or from your side, furthermore we have not received any other report for this issue.