Trying to setup new 3CX instance, Having Sonicwall issues

[jiggysmack]

I'm trying to bring up 3CX but my firewall test fails at the last moment.

• resolving 'stun-us.3cx.com'... done
• resolving 'stun2.3cx.com'... done
• resolving 'stun3.3cx.com'... done
• resolving 'sip-alg-detector.3cx.com'... done
• testing 3CX PhoneSystem 01 SIP Server... failed (How to resolve?)
  • stopping service... done
  • detecting SIP ALG... failed (How to resolve?)
  • testing port 5060... not reachable (How to resolve?)
  • starting service... done
• testing 3CX PhoneSystem Media Server... done
  • stopping service... done
  • testing port 5090... done
  • testing ports [9000..9398]... done
    • testing port 9000... done
    • testing port 9002... done
    • testing port 9004... done

I've setup my Sonicwall SonicOS Enhanced 6.5.5.1-6n as per the documentation.

Can anyone point me in the right direction?

 

[Charles_3CX]

The guide for the sonic wall that we have is here:https://www.3cx.com/docs/sonicwall-firewall-configuration/

It seems you have SIP ALG enabled, which you can also disable according to Sonic Wall's guides.

 

[jiggysmack]

I followed the instructions on that guide. SIP ALG is in fact disabled which is why I'm puzzled with the error message.

 

[Charles_3CX]

According to the firewall checker, it still detects this to be enabled.

You may check here: Why the Firewall Checker Does Not Lie

 

[fortech]

Footnote for what it might be worth, a gentle search of google/forums, brings to the top of the candidates for consideration,

Thread 'Need HELP with v20 FQDN & Firewall Checker using Sonicwall'

Jun 14, 2024

Hello and good day peeps. I am having issues and need some assistance with getting the FQDN to resolve the 3CX server private IP, so it will remove the "red error message" on the admin login landing page. Also with getting a good clean firewall check from 3CX. I have combed through all of the guides and forum posts that deal with or mention "sonicwall" settings and getting a good firewall check and setting up a "lookback" policy for the FQDN. I have created all of the settings manually and by using the "wizard" in the Sonicwall, but nothing seems to be helping. I know it is possibly...

• tbc-tech
• firewall checker fqdn sonicwall
• Replies: 14
• Forum: Phone System / PBX

and then apparently this could be helpful maybe > https://www.sonicwall.com/support/k...using-public-ips-loopback-nat/170505780814635
(Although this seems more focused on FQDN<>DNS<>Loopback drama maybe?)

anyhoo. In case it is maybe helpful. There are possibly these and maybe other threads already in the forum related to on prem 3cx and sonicwall setup.

... all this makes me happy that the 3cx instances I am managing for clients, are simply hosted on public accessible VM (ie, each 3cx VM has its own public IP address directly, no intervening hardware firewall, no on-prem-firewall drama). But I do appreciate some people still like to host things on-prem.

hopefully it gets sorted soonerish-not-laterish and without too much pain-drama-debug joy.

Tim