Jabber Guest External and Internal link

[panjwani80]

my customer has working Jabber guest 10.6 solution and they are wondering if it is possible use Jabber Guest link internally on the corporate network so people who do not have Jabber client they could use Jabber guest instead to join video calls. At the moment when they go to Jabber Guest link on corporate network it reroutes them to admin login page. Jabber Guest link externally from the internet works fine.

Thanks

[yjin2]

Hi

In customer's deployment Jabber Guest link externally from the internet works fine is because it goes through firewall which remap port 443 to 9443.Go to Jabber Guest link on corporate network will not go through firewall,so the port can not get remapped and go to expressway admin login page.

Solution:

Include port 9443 in call links for internal calling like below : https://jabberguest.company.com:9443/call/user@company.com

[panjwani80]

Hi,

Thanks for your help. I have tried the call link internally with port 9443 included but I get "this site can't be reached"..any more ideas?

Thanks

[yjin2]

Hi,

To make sure you try correct link ,What is the external link look like in your deployment?  

If the external link is https://vcse.company.com/call/user@company.com

the internal link should be https://vcse.company.com:9443/call/user@company.com,just add port 9443 to the external link.

(Maybe the example "https://jabberguest.company.com:9443/call/user@company.com" give your wrong impression ,you put the Jabber Guest server in the link.)

[panjwani80]

Hi,

correct I used external link and added 9443 to access it internally but it wouldn't work.

not sure if it matters but this is a single NIC deployment and customer has Palo Alto firewall

Thanks

[yjin2]

Please check with IT admin about the port configuration in firewall(whether port 9443 is blocked). The better option is configure port remapping 443->9443 for both internal access and external access. Then user does not need to add port 9443 in link. IT admin should be familiar with the network deploy topology. Ask them to check the route between computer(on which you click jabber guest link) in corporate network and vcse, find out the firewall in the route ,then add port remapping 443->9443 on the firewall .