FaceTime through Smoothwall UTM1000

[magikmike]

Hi All

We've recently discovered that our smoothwall appliance is not allowing facetime calls through, even though we have the correct exceptions in place in the firewall. Nothing appears to have changed in our config, nor does the apple support page we followed to configure it mention any changes... it's just stopped working!

 

Any help or similar experiences would be useful

 

Thanks,

Mike

[AMLinington]

Check Firewall port rules - facetime is a bit of a pain for wanting ports open. Have a look at this: Using FaceTime and iMessage behind a firewall

 

If you're behind an LEA firewall it might be blocked upstream so you might need to do some traffic dumping.

[magikmike]

Hi AMLightfoot. The apple support doc you linked to is the same one i was working from. I've opened the ports as it suggests, but it seems to make no difference. Calls can be placed but they never "connect" when answered.

 

We're a private school, so no LEA upstream firewall - direct web connection via BT leased line.

[AMLinington]

Have you whitelisted and added the iTunes category to auth exceptions?

 

Also, are you transparently intercepting HTTPS?

[magikmike]

Thanks for your reply. We had *.apple.com whitelisted, but have now done the same for all the itunes addresses and the issue appears to be resolved.

 

Thanks for your help!

[OB1]

FYI: With Smoothwall you don't need the star

[davidstallwood]

Hi, When you say you have added 'All the itunes addresses' what exact addreeses did you add? I also can't get face time working in school

[OB1]

Hi, When you say you have added 'All the itunes addresses' what exact addreeses did you add? I also can't get face time working in school

 

Through a Smoothwall?

[davidstallwood]

Yes it is

[OB1]

Yes it is

 

Whitelist the iTunes category and add it to Authentication Exceptions.

That category contains all the addresses necessary.

You'll also want to follow AMLightfoot's link and open the ports it recommends.

[davidstallwood]

lovely thanks

[martinpafc]

This is very interesting as we are experiencing the same issue with FaceTime as calls are never "connected". The ports outlined in the above link have been opened and as a result, iMessage is now working. We have a LightSpeed filtering system, so I am wondering if FaceTime is being filtered by the standard policy. Could anyone please indicate what urls should be whitelisted? Appreciate the help!