Skip to main content
jarry
jarry
New Member
October 3, 2019
Question

Video Conferencing Setup

  • October 3, 2019
  • 1 reply
  • 9745 views

We have a Fortigate 80E firewall in our environment. We recently acquired a LifeSize Express 220 video conferencing unit that I need to setup. I am newbie at configuring firewalls so my question is the following. Should I setup the video conferencing device on the DMZ port or is hook up to an available port on the internal network?  

    1 reply

    mjcrevier
    mjcrevier
    New Member
    October 3, 2019

    If you're using the default internal interface "lan", you can connect to any of the internal ports.

    Dave_Hall
    Dave_Hall
    New Member
    October 7, 2019

    Hi Jerry.

     

    Glancing at a general VC unit setup (was not able to locate a PDF manual for the model in question, though) from LifeSize's support site, it seems you can set up the VC unit on the DMZ, assuming you have a public IP or on the LAN via port forwarding.  (The LAN/Port forwarding seems to be more complicated in making out bound calls, though.)

     

    Your best bet maybe to contact LifeSize's support and/or consult their setup guide on what is required for setting up the VC unit behind a router.  I was able to find this guide, but don't know how useful it would be.

     

    jarry
    jarryAuthor
    New Member
    October 9, 2019

    I placed the VC unit on the DMZ and the unit still fails to register. I am not sure if I am missing a policy or if I even created the correct policies. This is what I did.

     

    For the DMZ interface I gave it an ip of 192.168.5.1

    DHCP Server range - 192.168.5.2 - 192.168.5.5

    The VC unit picked up ip 192.168.5.2

     

    Inbound rule

    Incoming Interface - Centurlyink (wan1)

    Outgoing Interface - DMZ (dmz)

    Source All - (for now to test then I want to restrict it to what is only needed)

    Destination - LIfesize Express 

    Schedule - Always

    Service - All

     

    Internal rule

    Incoming Interface - Internal (lan)

    Outgoing Interface - DMZ (dmz)

    Source - DMZ(dmz)

    Destination - Centurylink (wan1)

    Schedule Always

    Service All

     

     

    These are the other docs that lifesize sent me. 

     https://www.lifesize.com/en/help/admin-console/get-started/configure-firewall/open-ports

     

    https://www.lifesize.com/~/media/Documents/Product%20Documentation/Video%20Systems/Guides%20and%20Reference/Video%20User%20Administrator%20Guide%2048%20EN.ashx

    Pages 39-42

    Terms & ConditionsAccessibility statement