On Aug 31, 2018, at 06:55, Ryan Huff <[email protected]<mailto:[email protected]>> wrote:
No, it shouldn’t, stateful egress should be fine (what goes out, comes back in the same way). However, since you say you have a PA ... I'm guessing it is doing something weird that isn’t expected. Layer 7 firewalls are the bane of Cisco UC existence... lol (not that bad really, just takes extra effort almost always). I had a similar type issue with a CheckPoint firewall recently and in that case, we discovered the CP was doing this odd inspection and classification of the traffic .... so we had to disable the application identification mechanism so the traffic wasn’t inspected or classified. Sent from my iPhone On Aug 31, 2018, at 06:49, Dana Tong <[email protected]<mailto:[email protected]>> wrote: Does it need a direct one to one NAT? There was nothing in the Palo Alto logs for denial of traffic. Regards, Dana Tong +61 416 165 030 On 31 Aug 2018, at 8:28 pm, Ryan Huff <[email protected]<mailto:[email protected]>> wrote: Something is in its way to the Internet ... web filter perhaps? Asymmetrical route somehow? Expressway-C is a diva when it comes to having Internet access for the Hybrid connectors. Sent from my iPhone On Aug 31, 2018, at 02:47, Dana Tong <[email protected]<mailto:[email protected]>> wrote: FYI it also times out and fails when the device has full Internet access. From: cisco-voip <[email protected]<mailto:[email protected]>> On Behalf Of Dana Tong Sent: Friday, 31 August 2018 4:35 PM To: cisco-voip voyp list <[email protected]<mailto:[email protected]>> Subject: [cisco-voip] Cisco Hybrid Services Expressway Connector registration Hey guys, I keep getting a timeout when trying to register an Expressway Connector for Hybrid Services. hercules-a.wbx2.com<http://hercules-a.wbx2.com> took too long to respond. The domain is Verified in the Webex Control HUB, and the device name / fqdn is in the HUB also. The Expressway C box has access for TCP port 80, and 443 (http/s). I try to initiate the registration on the Expressway, enter my credentials, and then select the option for Cisco to manage the certificate and click register. It then just times out. Any tips? Cheers Dana _______________________________________________ cisco-voip mailing list [email protected]<mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
