Question about Video conference

[Luis Carranza]

Hi guys I got a situation right now, my client wants to make videoconference call thorugh Microsoft Office Communicator, this should be operating between host from one site to another one, but we already configured some rules in the firewalls, and making some test I see that the videoconference use dynamic ports (1024 to 65535) and if we let to operate the videoconference we should remove all the rules in the firewall and that's not the point, so If you know any solution to this issue please let me know.

Regards

[Maykol Rojas]

Hello Luis,

Microsoft Office communicator uses a protocol that is called STUN if it goes over UDP. Unfortunately STUN is not supported on the ASA, thus video conference calls using Office communicator wont work. This is because over the communication already established they open new channels for new traffic flow, since the firewall does not see this traffic, the packets get dropped.

Hope it helps.

Mike

[Luis Carranza]

Hi Maykol

In fact I was making test with 2 users and only when I remove the security rules and it works but when I apply the security rules the connection drops because every new connection uses different ports. I was wondering if there are any other method to get this work but I'm affraid there is not.

Regards

[Maykol Rojas]

Hello Luis

That is exactly the problem. I talked to the folks from Microsoft when I had this issue and they told me how Communicator works, during the call they start another control channel in order to open the new dynamic set of ports, if the firewall does not see these ports the traffic gets drop.

Hopefully STUN support will be introduced in New versions.

Cheers

Mike

[Luis Carranza]

Thanks for your help Maikol. I really appreciate it.

Regards

[Maykol Rojas · Accepted solution]

Hello Luis,

No problem, hopefully waiting for this to be supported. Would you please marked this issue as closed?

Thanks!

Mike

[cisco]

Has anyone figured a work around for this problem?