Softphone provisioning and my firewall

[HeathBCT]

Hey All,

I followed the guide for the softphone - and it doesn't mention opening port 80 on the firewall (that I read anyhow)...

So when I attempt to connect the softphone from outside the network I can see my ip requesting 80 on my firewall.. and since it is denied the softphone cannot connect to the call server. I would prefer not to open port 80 to the ip office if I can avoid it.

The troubleshooting I have done is I did open 443 and when I type the server address I added the HTTPS to the front (as indicated in the guide) and it just closes the connection right away. I dont even see the softphone trying to hit my firewall.

I also changed the HTTP provisioning to medium - low in the security settings of the IP office so it would use the 443 port by default but no joy there.

The softphone does connect without issue within the network. This is only a problem outside the network.


Our firewall is a watchguard
IPO 9.0
We have FQDN pointed at IPO

Anyone run into this issue before?

Thanks in advance.

ACSS - SME

 

[AACon]

I assume you have HTTP softphone provisioning on within the IPO? It's not usually on by default.

-Austin
ACE: Implement IP Office

 

[HeathBCT]

Yes it is on

Is there anyway I can make it not authenticate over port 80? Just for security reasons I'd rather not have that port open and forwarded to the IPO.

ACSS - SME

 

[AACon]

Well, the softphone is not supported through anything but a VPN, so that should never be an issue anyhow.

-Austin
ACE: Implement IP Office

 

[HeathBCT]

Ah ok. Thanks

ACSS - SME