Comments on: What Ports do I need to open on my Firewall?

By: Curtis Johnstone

Curtis Johnstone — Wed, 09 Dec 2009 22:28:47 +0000

Hi Thomas,
I’ll will try to help (Pro bono) – which involves many questions about your environment, etc.., so I’ll start a dialog with you over email. Any interesting results can be posted back here.

Also, you can take a look at the Microsoft “Office Communications Server and Client Troubleshooting and Support” page (http://technet.microsoft.com/en-us/office/ocs/dd450353.aspx) which includes contact information for Microsoft if you have ruled out basic configuration and environmental factors.

By: Thomas_K

Thomas_K — Wed, 09 Dec 2009 11:44:12 +0000

The user is a internal user connected via Internet to the Edge-Server. How should we proceed to get rid of the problem, any tipps? (or maybe we can hire you as consultant on a per hour basis?)

Thanks in advance,
Thomas

By: Thomas_K

Thomas_K — Fri, 27 Nov 2009 08:04:17 +0000

Its strange, on the remote client the Remote Desktop connects tries to establish and then just closes, without an error message. On the corporate side, it just says the the connection cannot be established. And one strange event log error message on the corporate client side:

A SIP request made by Communicator failed in an unexpected manner (status code 80ef01e0). More information is contained in the following technical data:

RequestUri: sip:xy@domain.xy
From: sip:abc@domain.xy;tag=b4e60882bb
To: sip:xy@domain.xy;tag=EF737F2074A2BC01A3E8CD2711672E73
Call-ID: a9d04e41440b4b7fab17e63113929f98
Content-type: application/sdp;call-type=im

v=0
o=- 0 0 IN IP4 192.168.1.1
s=session
c=IN IP4 192.168.1.1
t=0 0
m=message 5060 sip null
a=accept-types:text/plain multipart/alternative image/gif text/rtf text/html application/x-ms-ink application/ms-imdn+xml text/x-msmsgsinvite

Response Data:

480 Temporarily Unavailable
ms-diagnostics: 2;reason=”See response code and reason phrase”;source=”SERVER01.domain.local”;AppUri=”http://www.microsoft.com/LCS/DefaultRouting”

By: Curtis Johnstone

Curtis Johnstone — Thu, 26 Nov 2009 16:41:11 +0000

Desktop Sharing uses the same communication path as the Edge A/V functionality (it uses the Remote Desktop Protocol (RDP) over SRTP), so if this is working there should be no additional ports to open for Desktop Sharing using Communicator. Also, if an external A/V session is working with the same external client, that eliminates a lot of potential firewall and certificate issues.

Is the client (external) a authenticated internal user running externally? (e.g. not a PIC recipient) What error are they getting when they attempt to establish a desktop sharing session?

By: Thomas_K

Thomas_K — Thu, 26 Nov 2009 10:39:00 +0000

Hi,

do you know which ports are required for Desktop sharing via Communicator?
We have a client, which is able to do Video/Audio from the internet via edge to internal clients but no Desktop sharing?

Thanks in advance

By: Curtis Johnstone

Curtis Johnstone — Fri, 05 Sep 2008 17:18:52 +0000

No, unfortunately I have never worked with Checkpoint NGX.

By: Andrew_S

Andrew_S — Thu, 04 Sep 2008 10:18:30 +0000

Looking at the firewall requirmetns have you any experince of implementing this on checkpoint ngx.