Don’t put a LifeSize VideoCenter behind a Sonicwall Firewall

SonicWall-partnerIf you put a videoconferencing endpoint behind a sonicwall and open all needed ports, or even “any” port to the endpoint, the videocall will work fine. However, this is not because (or just because) you are opening the inbound ports. It is also because the sonicwall understand H323 and SIP traffic, specifically the UDP packets that are coming into the system.

However, if you put a LifeSize Videocenter behind a Sonicwall, it will not work, no matter if you open all the ports or not. If you do a packet capture on the Sonicwall, you will see that the firewall is “consuming” the UDP packets. It considers the packets to be an intrusion.

sonicwalllog

Turning off the deep packet inspection fixes it. Or moving the LifeSize Videocenter outside of the firewall (it is designed to sit on the Internet).

-Scott

 

Leave a Reply

Your email address will not be published.


7 − = one

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

The Free-Range Technologist © 2014