KFS through a firewall

[copytech_32716]

I have a client that added a new firewall and all his machines dropped offline in KFS.
I sent them the Tech Bulletin #12 POST data
and they added the rules.

The diagnostic tool on the DRD Tool has all green checkmarks and they said "They can see traffic leaving the firewall headed for the XMPP servers"

Any other ideas?

[bsm2]

Re: KFS through a firewall

Reboot devices and firewall

[tmaged]

Re: KFS through a firewall

Enable the browser on the mfp & see if you can get to https://rfs-us.kyocera.biz/
It should show OK on the browser.
Also check that Geo Blocking isn't on. The KFS servers aren't located in the US.

[copytech_32716]

Re: KFS through a firewall

Enable the browser on the mfp & see if you can get to https://rfs-us.kyocera.biz/
It should show OK on the browser.
Also check that Geo Blocking isn't on. The KFS servers aren't located in the US.

Do you know what country to allow? They say all the servers are in Texas...

[Samanator]

Re: KFS through a firewall

Some would say Texas is another country, but that is probably a discussion for another time......just sayin'.

[tmaged]

Re: KFS through a firewall

The Whitepaper says the servers are located in the EU, Amsterdam & The Netherlands. I'm assuming the servers will stay the same when they switch from the XMPP protocol.

[sparkycivic]

Re: KFS through a firewall

Have the firewall admin ENSURE that TLS/SSL inspection be DISABLED for traffic to/from these devices. If they can't prove that the traffic is unmolested, have them create a firewall rule/policy that DMZ's the devices as a test to prove that their firewall is the problem, because it is always the firewall.