AnsweredAssumed Answered

Skype does not work via Checkpoint proxy server

Question asked by Dilmurat Zakirov on Jan 3, 2018
Latest reply on Jan 11, 2018 by Hugo van der Kooij

Hello guys, can you help me. i use my checkpoint as a corporate non-transparent http/https proxy server. and my users cannot use Skype application via this proxy server. i allowed "All recognized" access for skype user. but skype still does not work. 

configuration on firewall:

configuration on application control/url filtering  policy:

when we try to run skype i've got some debug results:

 

[Expert@CP-SG1:0]# fw ctl zdebug drop |grep 10.0.1.194
;[cpu_1];[fw4_2];fw_log_drop_ex: Packet proto=6 10.0.1.194:55980 -> 10.30.12.212:8080 dropped by fw_first_packet_state_checks Reason: First packet isn't SYN;
;[cpu_1];[fw4_2];fw_log_drop_ex: Packet proto=6 10.0.1.194:55980 -> 10.30.12.212:8080 dropped by fw_first_packet_state_checks Reason: First packet isn't SYN;
;[cpu_1];[fw4_2];fw_log_drop_ex: Packet proto=6 10.0.1.194:55980 -> 10.30.12.212:8080 dropped by fw_first_packet_state_checks Reason: First packet isn't SYN;
;[cpu_1];[fw4_2];fw_log_drop_ex: Packet proto=6 10.0.1.194:55980 -> 10.30.12.212:8080 dropped by fw_first_packet_state_checks Reason: First packet isn't SYN;
;[cpu_1];[fw4_2];fw_log_drop_ex: Packet proto=6 10.0.1.194:55980 -> 10.30.12.212:8080 dropped by fw_first_packet_state_checks Reason: First packet isn't SYN;
;[cpu_1];[fw4_2];fw_log_drop_ex: Packet proto=6 10.0.1.194:55980 -> 10.30.12.212:8080 dropped by fw_first_packet_state_checks Reason: First packet isn't SYN;

 

how to fix problem and run Skype?

 

Outcomes