- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
We are running Gaia 75.40, and trying to get Skype for Business going. This is an on premise installation, with one Front End Server, and one Edge.
We cannot seem to get Federation working, which from what I understand requires port 5061. We have created an object for Port 5061 (TCP) with nothing in the Protocol Type. However every time we run the MS Analyzer, the test fails as the SSL Negotiation:
Testing the SSL certificate to make sure it's valid. | |||||||||||||||
The SSL certificate failed one or more certificate validation checks. | |||||||||||||||
| |||||||||||||||
|
If I test this using Port 443, everything works fine (but that does not help me).
I have been banging my head against this for a while.
Regarding Check Point's Support Lifecycle Policy R75.40 is out of support since April 2016. You might want to upgrade to a supported version first.
However, sk114018 'Unable to connect to Skype application using port 5061 with pre-defined TCP service' describes what to do. If that doesn't work, contact Check Point support and open a service request once you updated to a supported version.
It turns out there was a different problem. TLS over 5061 was not working - nor should it be in my case. Our TLS traffic actually goes over 443 for Skype, as we have a 3 IP setup. The documentation I was using, had it mixed up, so I was chasing in the wrong spot. It was actually the Skype FE that was dropping the traffic, not the firewall.
REE: Upgrade - Yes we are aware of that. Project for later this Year to upgrade to latest stable version.
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY