Skype connection issue (skype can't connect)

[waaalex]

Hello all,

I've got a problem with Skype connection. Sometimes it works and sometimes skype can't connect without any clue..

On application control, i've granted acces to Skype

I've set a rule that use appsensor, and open a port.

But it change nothing. sometimes i can conenct slype but sometimes no..

Have you got an idea?

Regards,

Alexandre

[vmartin_FTNT · Accepted solution]

Are you using full SSL inspection (the deep-inspection profile). If you are, you may need to add an exemption, to make sure Skype traffic is not being inspected.

[mramon79]

Hi,

a have been testing for many weeks to try block /allow skype depends of our different user profiles and i can say Skype is such a pain in the neck.

I´m going to explain how i have configured the Fortigate to block/allow this application in 5.2.2 and 5.2.3 v, and it works ok.

You can access skype 3 ways:

1)specific application with skype user

2)specific application with hotmail  user

3)from outlook web interface

I use Fortigate as explicit web proxy and application control run before web filter(Fortigate documentation about traffic flow tells the opposite but this is only for fortigate in firewall mode).

If you want to allow it:

1) Application control, Categories P2P and Collaboration blocked and create an Application Overrides for Skype

2) In web filter Section-->Fortiguard Category "Internet Telephony" Allow and enable the following url filter:

        \.trouter\.io            Reg Expression      Enable

        .*skypeassets.com  Reg Expression    Enable

        skype.com               Simple              Enable

If you want to block the application only do the opposite.

I hope this may help you

Regards