I have recently setup Jabber Guest and it is working fine for most users however some users get "TURN Error" when trying to call in from their organization. Does this mean that even the caller needs to have their firewall open UDP port 3478?
How about your Expressway-E deployment? is it single nic or dual nic ?
If you are using dual nic, make sure when users try to access the jabber guest link from inside it resolves to Exp-E internal NIC ip-address.
It is a dual nic deployment. It does work for most as we have tested it with a number of outside users however people still get this error on some networks. This is what leads me to the conclusion it is their network not ours blocking the stream. I was just wondering if that port needs to be open on the guests network or if this error could come up for another reason.
yes, it utilizes the TURN for the JG.
If its not working then you can collect logs on expressway or wireshark on the client PC. In the wireshark you would initially see TURN allocation request and failure, but after few of those, you must see Bind success. It utilizes the port 3478 for TURN media.
Also look at this guide, i wrote it when i was in Cisco. It gives a good indication to troubleshoot JG issues.