3CX Phone System behind Check Point 3100

[Mboux23]

Hello

Has anybody ever made 3CXPhone System Check Point Security Gateway | R80.40.

Tried options found here and ever the internet but 3CX firewall checker fails every time.

I have added all necessary NAT rules and NAT port translation

[PhoneBoy · Accepted solution]

I suspect you will need to do a static NAT to a different IP address (not the firewall's external IP).
This is based on this thread for one of our SMB appliances: https://community.checkpoint.com/t5/SMB-Gateways-Spark/3CX-Phone-System-behind-1450-Appliance/m-p/10...

[Mboux23 · Accepted solution]

Hi PhoneBoy

Thanks for your reply.

Your suggestion have resolve my isuue. I did Static NAT and its work fine now and firewall check passed sucessfully.

[Naguinix]

How did you disable the sip alg?

I'm trying the same thing and my test stays on sip alg.

[Mboux23]

Hi James

Have you already configured Static NAT on your firewall? Also, are all the necessary ports open?

 WAN IP in static NAT. Hide outgoing traffic and Force translate. You just need to create a Static NAT rule on your firewall, mapping your 3CX server IP to your WAN IP.