Has anyone come across a problem with Skype (VoIP calls) working intermittently through a 1400?
Sometimes it works perfectly. Other times it doesn't. There's no apparent pattern to when it will or won't work.
The customer has a centrally managed cluster of 1470 appliances and to date we've upgraded the firewall from R77.20.60 to R77.20.86, disabled SecureXL as a test and disabled Protocol Inspection on port 5060 but none of these changes have resolved the issue. The issue manifests itself as follows;
When we call inbound, e.g. mobile phone to Skype DDI
• Skype rings
• you can answer the call
• there is 5-10 seconds of silence (neither party can hear each other)
• the call disconnects
When we call outbound, e.g. Skype to a mobile phone
• we hear the Skype internal ring tone for roughly 5 seconds.
• the call disconnects.
• error logged on Check Point (zdebug) fw_log_drop_ex: Packet proto=17 172.30.241.26:51306 -> xx.xx.xx.xx:3478 dropped by fw_handle_first_packet Reason: fwconn_key_init_links (INBOUND) failed;)
Error seen on the Active cluster member;
[Expert@rdg3corpfw01]# fw ctl zdebug drop | grep 172.30.241.26
;[cpu_1];[fw4_1];fw_log_drop_ex: Packet proto=17 172.30.241.26:51306 -> xx.xx.xx.xx:3478 dropped by fw_handle_first_packet Reason: fwconn_key_init_links (INBOUND) failed;
We see the drops every time it fails. When it works there's nothing in zdebug. There are no drops in Tracker that seem relevant either.
I note sk86984, but that refers to custom protocols, so I don't think that applies in this case?
Anyone got any thoughts?
Cheers,
Matt