cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
Iron

Skype for business content sharing R80.20 shows private IP destination in logs

Jump to solution

Good Morning everyone,

 

i have experienced a weird behaviour in past weeks regarding skype for business and Cisco Any Connect.

Issue: Users trying to connect via CiscoAnyConnect or attend a skype meeting with shared content are unable to establish a connection.

Environment: R80.20 running one the gateways. Https Bypass set for all known Skype URLs .

Any Service allowed for all known Microsoft Skype Server IPs set in Application filter.

Behaviour: when i check the logs of the failed clients, i see a few packets to a valid microsoft server range (e.g. 52.112.0.0 /14). The traffic to this ip gets a rejext with message "First packet isn't SYN" 

Then i see a lot of packets trying to connect to a private 10.* range which is of course blocked in the firewall ruleset.

 

Did anybody experience the same problem?

 

With best regards

 

 

 

0 Kudos
1 Solution

Accepted Solutions
Highlighted
Iron

Re: Skype for business content sharing R80.20 shows private IP destination in logs

Jump to solution

Hi,

 

only the private range is part of the encryption domain.

I recently made the changes described in sk162517 . Since then i was not able to see the problem again (last test yesterday).

I will keep monitoring this and send an update.

 

Thanks !

View solution in original post

0 Kudos
4 Replies
Highlighted
Admin
Admin

Re: Skype for business content sharing R80.20 shows private IP destination in logs

Jump to solution
Is that IP range in your encryption domain at all?
0 Kudos
Highlighted
Iron

Re: Skype for business content sharing R80.20 shows private IP destination in logs

Jump to solution

Yeah, 

the IP range is part of our center gw encrytion domain.

 

0 Kudos
Highlighted
Admin
Admin

Re: Skype for business content sharing R80.20 shows private IP destination in logs

Jump to solution
Both the public and private IPs you mention?
0 Kudos
Highlighted
Iron

Re: Skype for business content sharing R80.20 shows private IP destination in logs

Jump to solution

Hi,

 

only the private range is part of the encryption domain.

I recently made the changes described in sk162517 . Since then i was not able to see the problem again (last test yesterday).

I will keep monitoring this and send an update.

 

Thanks !

View solution in original post

0 Kudos