17/04/2014

Lync2013 and CheckPoint Firewall...


I have noticed something strange when it comes to the customers using Checkpoint Firewall. What we found out was that if we used the default rules in Checkpoint for traffic on Port 5061, well then it stripped out the SSL traffic and send the rest as normal traffic.




Why Checkpoint strip down the traffic I don’t know. To solve this we had to create normal TCP 5061 rules for this type of traffic.

There are other who had this issue http://social.technet.microsoft.com/Forums/lync/en-US/320f12d3-12b3-49ae-8823-bd51b96d62d8/lync-federation-with-checkpoint-firewall

 

For my customer we had involved Microsoft Premier Support, have been checking the Lync 2013 deployment up and down, checked the certificates, analysed network, server, clients and it all. The whole time it was the CheckPoint FW who stopped us and we could not see it J

                                                        
at

9 comments:

  1. Anonymous14/7/14 18:18

    I have lync 2013 + checkpoint firewall. Federation with skype works correctly but federation with other partners e.g office 365 is showing unknown presence. Any idea? Please confirm what needs to be done exactly on checkpoint?

    ReplyDelete
    Replies
    1. Kai Stenberg8/9/14 09:34

      If you have federation wiht other partners that Works, well who has you ordered Your external certificate from?
      On the Checkpoint we did not use the default rules from Checkpoint but we made custom rules.

      Delete
  2. Amado Imperial8/9/14 01:10

    Great Help¡¡ Thanks a lot¡

    ReplyDelete
    Replies
    1. Kai Stenberg8/9/14 09:32

      Great that it helped you solve Your challenges

      Delete
  3. Damilola Cole10/3/15 13:24

    Hi Kai

    Please is the screenshot show above for the default sip on the firewall or the one you created.

    I seem to have a similar issue. Thanks in anticipation

    ReplyDelete
  4. Kai Stenberg10/3/15 21:12

    These are the custom one that we have used here. The default one from Checkpoint stopped the traffic.

    ReplyDelete
  5. Damilola Cole20/3/15 08:26

    Thanks Kai!

    ReplyDelete
  6. Ben1/10/15 01:31

    I know this is an old Blog but one of the first comments mentioned SfB and Offie365 integration. I found this KB article which might solve your issue: https://support.microsoft.com/en-us/kb/2409256

    ReplyDelete
  7. Hadoop Training in Chennai28/12/15 08:47

    Well Said. The content provided is true up to my knowledge. This made me to understand the concepts very clear. Thanks for sharing this wonderful information in here. Keep blogging article like this. I have bookmarked this page for future reference as well.

    ReplyDelete

Subscribe to: Post Comments (Atom)