17/04/2014

Lync2013 and CheckPoint Firewall...


I have noticed something strange when it comes to the customers using Checkpoint Firewall. What we found out was that if we used the default rules in Checkpoint for traffic on Port 5061, well then it stripped out the SSL traffic and send the rest as normal traffic.




Why Checkpoint strip down the traffic I don’t know. To solve this we had to create normal TCP 5061 rules for this type of traffic.


 

For my customer we had involved Microsoft Premier Support, have been checking the Lync 2013 deployment up and down, checked the certificates, analysed network, server, clients and it all. The whole time it was the CheckPoint FW who stopped us and we could not see it J

                                                        

9 comments:

  1. Anonymous14/7/14 18:18

    I have lync 2013 + checkpoint firewall. Federation with skype works correctly but federation with other partners e.g office 365 is showing unknown presence. Any idea? Please confirm what needs to be done exactly on checkpoint?

    ReplyDelete
    Replies
    1. If you have federation wiht other partners that Works, well who has you ordered Your external certificate from?
      On the Checkpoint we did not use the default rules from Checkpoint but we made custom rules.

      Delete
  2. Great Help¡¡ Thanks a lot¡

    ReplyDelete
    Replies
    1. Great that it helped you solve Your challenges

      Delete
  3. Hi Kai

    Please is the screenshot show above for the default sip on the firewall or the one you created.

    I seem to have a similar issue. Thanks in anticipation

    ReplyDelete
  4. These are the custom one that we have used here. The default one from Checkpoint stopped the traffic.

    ReplyDelete
  5. I know this is an old Blog but one of the first comments mentioned SfB and Offie365 integration. I found this KB article which might solve your issue: https://support.microsoft.com/en-us/kb/2409256

    ReplyDelete
  6. Well Said. The content provided is true up to my knowledge. This made me to understand the concepts very clear. Thanks for sharing this wonderful information in here. Keep blogging article like this. I have bookmarked this page for future reference as well.

    ReplyDelete

Teams admin portal update

As many of you know already the Skype/Teams portal has changed name to nothing new here to report.