3cx firewall issues

[dobbyit]

Since upgrading to 3XC V18.5 we have firewall issues being reported. I have contacted our firewall company and managed to solve a range of port issues but I have been left with 3 issues that cant be solved at the moment.

testing 3CX PhoneSystem 01 SIP Server... failed (How to resolve?)

 

• stopping service... done
  
• detecting SIP ALG... failed (How to resolve?)
  
• testing port 5060... full cone test failed (How to resolve?)
  
• 
  

3CX gives me this website - https://www.3cx.com/docs/firewall-checker/

The firewall company have said they have turned off SIP ALG on teh firewall and port 5060 is open inbound and outbound but still failing. Anybody got any ideas? we use RM Education on a juniper firewall

[TechMonkey]

Does the phone system work? To give context, my last 3CX install never passed firewall tests but worked flawlessly. I'd keep going back to resolve the issues but the test just did not like our setup. It annoyed the heck out of me but worked.

[mavhc]

So you have a computer running 3CX, and a firewall. What are the firewall settings to allow the outside world to connect to the 3CX server? Who is your SIP provider and what settings do they require?

[Davit2005]

Does the phone system work? To give context, my last 3CX install never passed firewall tests but worked flawlessly. I'd keep going back to resolve the issues but the test just did not like our setup. It annoyed the heck out of me but worked.

 

Same here. Never passed but worked.

[dobbyit]

Phone system working for in and outbound calls, updates now working for phones and software. We use RM education firewall i have requested all outbound and inbound ports open, no proxy on the static ipaddress and bypass the filtering. Sophos is not attached to that ipaddress so no blocking there, we use 3cx subcontracted by YTL.

[MatthewL]

Mines no different at home. Only time it was all good was when I messed with the NAT but it was too exposed for what I needed so restricted it again and its been fine since.

[mavhc]

If it works I'd just leave it, no point opening more than the minimum