The problem is that the bjn.vc is trying to connect directly to a bluejeans server (without going through the proxy). This is getting blocked since there is no direct Internet access from internal network: I could specify a URL in a PAC file to bypass Content Gateway but our network guys says that will cause other problems.
Is there another way or other possible solutions?
-
150 Points
Posted 1 year ago
-
110 Points
-
150 Points
No we are leveraging what's in-place. I use bluejeans.com/111 for the test. When I start the Bluejeans app with Chrome this goes through the proxy but when the app is trying to connect to the bjn.vc directly to internet rather using the proxy. Both sites were whitelist: *.bluejeans.com & *.bjn.vc .
The network guy confirmed that all the request that the application does through the proxy are permitted.
-
110 Points
Marcel are you a colleague from Remco in the Netherlands? Just checking if a call might be faster here. Look forward to your feedback
-
150 Points
No, we are in Montreal, Canada
-
110 Points
ah excellent, you have a "name brother" that is looking into exactly the same issue.
-
110 Points
I will leave you in the hands of the BlueJeans team here on the Messageboard to address this further. Hope this instruction set might help. It sound like you might need to allow a bypass of the proxy for the specific video traffic listed here:
https://support.bluejeans.com/knowledge/tcp-udp-ports
https://support.bluejeans.com/knowledge/tcp-udp-ports
-
150 Points
Thanks Axel, looking forward with Bluejeans team. Thanks a million
FYI we don't use BlueJeans Rooms just the basic. As per my Firewall guys not all the port are open but open enough to make it work all the issues are around the bjn.vc but I wasn't aware of these Akamai or AWS will check with the guys.
Lee Snyder, Official Rep
-
5,576 Points
-
150 Points
Yes, When the Firewall guys perform a sniffing with wireshark tool to see that bjn.vc is trying to connect directly to internet and by passing the proxy.pac and that is the problem.
Lee Snyder, Official Rep
-
5,576 Points
Hello Marcel,
Is this a web-proxy that is set to look at specific ports? The desktop application should use the same ports that the browser version of BlueJeans.
If you look at our TCP/UDP Ports Guide, you can see what IP ranges and Port ranges that BlueJeans uses. You can take this information and configure your proxy to route media on those ports through the proxy.
Regards,
Lee - BlueJeans Support
Is this a web-proxy that is set to look at specific ports? The desktop application should use the same ports that the browser version of BlueJeans.
If you look at our TCP/UDP Ports Guide, you can see what IP ranges and Port ranges that BlueJeans uses. You can take this information and configure your proxy to route media on those ports through the proxy.
Regards,
Lee - BlueJeans Support
-
150 Points
I think so but I will ask my team to confirm this. I will ask my Firewall guy to valid and test your suggestion
-
150 Points
He says that the problem is that the application does not go through the proxy. Ports are allowed on the proxy. (See the log)
Lee Snyder, Official Rep
-
5,576 Points
Hello Marcel,
The proxy would need to have rules or exceptions put in place so that any traffic must route through it first. You would need to reach out to the provider for your proxy to determine how to achieve this.
Regards,
Lee - BlueJeans Support
The proxy would need to have rules or exceptions put in place so that any traffic must route through it first. You would need to reach out to the provider for your proxy to determine how to achieve this.
Regards,
Lee - BlueJeans Support
-
150 Points
Lee, I do have the cookbook to do the exception but the network team won't do the exception because it is causing other issues on the network (They did the test). But all of us have the same question as why .bluejeans.com goes via the proxy but not the other domain *.bjn.vc that doesn't go the same path, why this behavior ? maybe it should be your app that should be tweak ? Thanks
-
150 Points
Can the BlueJeans app on Windows work solely through Outbound TCP Port 443, going through a web proxy, or it also needs TCP 5061 or 5000 as well as Outbound UDP Ports 5000-5999?
From https://support.bluejeans.com/knowledge/system-requirements, UDP ports wouldn’t be mandatory: “For strict firewall rules where all UDP ports are blocked, video/audio will work via TCP port with less optimal video experience.”Lee Snyder, Official Rep
-
5,576 Points
Hello Marcel,
As stated in the knowledge-based article, we do not require you to open the UDP ports but we do recommend it. In your testing, with the TCP 5061 or 5000 as well as Outbound UDP Ports 5000-5999 closed does the traffic on the application go through your proxy successfully?
If that is the case, I think the combination of the rules in your proxy and the 443 port open, you should see minimal quality issues. I would always recommend testing to determine how the quality comes in.
Regards,
Lee - BlueJeans Support
As stated in the knowledge-based article, we do not require you to open the UDP ports but we do recommend it. In your testing, with the TCP 5061 or 5000 as well as Outbound UDP Ports 5000-5999 closed does the traffic on the application go through your proxy successfully?
If that is the case, I think the combination of the rules in your proxy and the 443 port open, you should see minimal quality issues. I would always recommend testing to determine how the quality comes in.
Regards,
Lee - BlueJeans Support
