Zendesk voice application 3 second delay

[dehaasm]

Not sure if this is a Check Point related issue but the issue only appears when connected behind a Check Point firewall, when connected to direct internet the issue does not occur.

The issue is that whenever the Zendesk servicedesk application makes a Voice call (via Cloud STUN server) after answering a call there is a 3 second delay before the voice is heared, after 3 seconds the call works fine. While performing the same test without a firewal in between this issue does not occur.

We made packet captures and also tried to disable coreXL (fwaccell off) but it didnt resolve the issue.

In the packet capture the only thing i see is that there is a DTLS handhakes with a 3 second delay, meaning that it takes 3 seconds for the external server to reply. This does not show any delay on the Check Point firewall but perhaps i am overlooking something as we cannot find the root cause.

Dit someone already experience such issue?

[dehaasm]

we do source hide nat to the internet

[dehaasm]

might this be a good test to completely bypass the flow from secureXL?

https://community.checkpoint.com/t5/General-Topics/how-to-disable-SecureXL-for-specific-src-to-speci...

[the_rock]

Right...BUT, if sxl is turned off and issue happens, not so sure this may help : - (

Andy

[Reeve60]

Hi @the_rock

So, after looking into HTTPS inspection, the setting is turned off for our environment so it's safe to assume I don't need to create a bypass rule. 

@dehaasm thanks for the tip, which helped me to double-check if NAT is hiding internal networks (which this setting is turned off).

Stefan

[the_rock]

Agree 100%, if its off, no need to change anything with bypass rules.

[the_rock]

Yes, message me directly, we can connect offline, I will review the pcaps.

Andy