UDP Packet Dropped (not blocked) on SonicWall TZ190

Long story short, SonicWall is our gateway and firewall for a branch office. Connects to ISP fine and establishes VPN tunnel connection to our main office with no problem (and has been no problem for 6+ months). Recently have subscribed to Hosted PBX service and had this working (for about 1 week) but now the phones are not contacting their server (hosted somewhere other than our office) and the server believes that they are out of service and doesn't forward the inbound calls to them. Outbound calls work which tells me we have those ports open.

The picture shows a log from our SW TZ190 device showing that UDP packets are being dropped. I believe that this is the issue and that the phones are not responding to these "pings" and so the server won't forward incoming calls.

How can I ensure that all traffic can get it appropriately?
A.png
LVL 1
r_i_xAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brain2000Commented:
I rarely touch SonicWall, but I think I see what is happening.  I believe "dropping" is the same as "blocking".  It looks like your hosted PBX has started using port 5062 instead of 5060.  Why?  Uhhh.. I don't know.  I would call them and ask.

In the meantime, open up UDP ports 1024-65535 from your hosted PBX's IP address so they can freely travel into your network.  Hopefully that will get you working.
0
digitapCommented:
I'm confused that the source is WAN and the destination is WAN.  Is that because a user is calling another user internally across the VPN?
0
r_i_xAuthor Commented:
Ended up being related to enabling consistent NAT setting. Although, even after that, we have decided to remove that phone system for a standard (non-IP) system.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
digitapCommented:
cool...
0
digitapCommented:
thanks for the points!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.