Yealink Forums
Yealink, provisioning and Sophos firewall - Printable Version

+- Yealink Forums (http://forum.yealink.com/forum)
+-- Forum: IP Phone Series (/forumdisplay.php?fid=4)
+--- Forum: T4x Series (/forumdisplay.php?fid=31)
+--- Thread: Yealink, provisioning and Sophos firewall (/showthread.php?tid=45228)



Yealink, provisioning and Sophos firewall - UCUC - 07-01-2021 05:45 PM

Hi,

All of our phones are behind a (sophos) firewall.

All ports are open from phone network to provisioning server. (ANY to URL Provisioning)


This works, but we are seeing some strange drops on our firewall comming from the provisioning URL.

Also when we push "update Configuration" no red led is blinking.


When a phone is installed at my home internet, everything works much faster with updating, red light blinking etc.

What are we missing in our (Sophos) firewall?


RE: Yealink, provisioning and Sophos firewall - UCUC - 10-07-2021 03:58 PM

Anybody experiencing this problem?


RE: Yealink, provisioning and Sophos firewall - complex1 - 10-07-2021 05:28 PM

Hi,

I'm not using a Sophos firewall, but please check if the SIP ALG feature, if any, is disabled.

Also check that all TCP and UDP ports are forwarded to the local IP address of the phone.


RE: Yealink, provisioning and Sophos firewall - UCUC - 10-07-2021 06:22 PM

Hi,

SIP ALG is disabled.

Which ports and protocol are used to communicate with yealink servers?

What do you mean with "all TCP and UDP ports are forwarded to the local IP address of the phone"

thanks


RE: Yealink, provisioning and Sophos firewall - complex1 - 10-07-2021 10:06 PM

Hi,

I think you may definitely say the Sophos firewall is causing the issue, because a phone at your home, and behind the router firewall, is working well.
Somehow, the phones behind the Sophos firewall can not communicate with the PBX or VoIP Provider.
In the Sophos firewall, you need to open and forward mostly UDP ports to the local IP address of your phone.
Port 5060 UDP is the most important one.
I do not know which ports your provisioning or yealink servers uses.