Configure an Untangle Firewall

Objective

Configure an Untangle firewall to use with 8x8 services.

Applies To

• Untangle Firewalls

General Information

The purpose of this article is to provide a sample configuration. At the time of article creation, this device was in a known working state on the firmware used.

Keep in mind different firmware versions will interact with hosted VoIP services in different ways. While this device may be fully functional on the tested and/or current firmware version, it is possible newer revisions will cause disruptions in service or make a device fully compliant with the required settings for hosted VoIP services where it was previously not.

Note:

User guide for Untangle firewall is available on their wiki page.

Administrative Information

1. In a browser on a computer on the same network as the Untangle firewall, navigate to your Untangle device IP address you have assigned to it.

2. Log in with admin and password credentials (This is the password you set when you initially setup Untangle. Password recovery can also be found on their wiki page.

This has been tested on Untangle version 14.0.0.

Adding/editing 8x8 subnets is recommended when available. Review the Traffic Shaping and Specific Subnet/Port Configuration section of X Series Technical Requirements.

Procedure

Enabling Bypass VoIP

1. Click on Config at the top of the page.

2. Click Network

3. Click Bypass Rules

4. Make sure Bypass VoIP is checked

    

Adding 8x8 Subnets

1. Click on Config at the top of the page

2. Click Network

3. Click Filter Rules

4. Click Add

5. Set description 8x8 Subnets

6. Click Add Condition

7. Select Destination Address (ex. 8x8 West DC 1, 8x8 East DC 2)

8. Add 8x8 Subnets

Uncheck Enable SIP NAT Helper

1. Click on Config at the top of the page

2. Click Network

3. Click Advanced

4. Under Options Tab, Uncheck Enable SIP NAT Helper

Setting up Access Rules

1. Click on Config at the top of the page

2. Click Network

3. Click Advanced

4. Click Access Rules

5. Click Add

6. Set the description for each subnet (ex. 8x8 West DC 1, 8x8 East DC 2)

7. Click Add Condition

8. Select Destination Address

9. Add each subnet

Allowing Session through Shield

1. Click on Config on the top of the page

2. Click System

3. Click Shield

4. Click Add

5. Click Add Condition

6. Destination Address: IS

7. Add 8x8 Subnets

8. Select Action and then Pass