locked
Web App: Local firewall rules RRS feed

  • Question

  • Hi there,

    in our company, the SfB Web App is installed on each client. But when a user joins a meeting the first time, SfB Web App always asks for creating firewall rules in Windows. Since most of the users don't have administrator privileges they click on "Cancel" and everything works fine. This is also the way Microsoft recommends for the users ( support.office.com/en-us/article/trouble-installing-the-skype-for-business-web-app-plug-in-958fc5f1-2d6f-42e3-815d-a9516c591274 ).

    Now we'd like to deploy the local firewall rules sitewide and we wonder if we have any benefits if we set them to "Allow" instad of the default "Block". They are application-based for a executable called "pluginhost.exe".

    Does anyone know which is the better state?

    Thanks and best regards

    Tuesday, September 11, 2018 9:34 AM

Answers

  • Hello Thenicnic,

    It would be better to "Allow" the application through firewall.

    As you said, even if the user cancels the prompt they still can join the meeting and everything is working fine, but the "Allow" firewall rule helps in optimization and quality.

    This is what Microsoft is saying on the firewall prompt:

    Users may see a firewall warning the first time they run the meetings app. They may be prompted to open ports to optimize the experience, and this may require Admin privileges on the machine they may not have. The app should still function and the user can safely decline to open the requested ports.

    Hope this helps !

    Tuesday, September 11, 2018 9:42 AM
  • Hi Thenicnic,

    Agree with others, you should “Allow” this filrewall rules, this rule will Improve or optimize the quality of meetings.

    Best Regards,
    Leon Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.


    Wednesday, September 12, 2018 2:22 AM

All replies

  • Hello Thenicnic,

    It would be better to "Allow" the application through firewall.

    As you said, even if the user cancels the prompt they still can join the meeting and everything is working fine, but the "Allow" firewall rule helps in optimization and quality.

    This is what Microsoft is saying on the firewall prompt:

    Users may see a firewall warning the first time they run the meetings app. They may be prompted to open ports to optimize the experience, and this may require Admin privileges on the machine they may not have. The app should still function and the user can safely decline to open the requested ports.

    Hope this helps !

    Tuesday, September 11, 2018 9:42 AM
  • Hi Thenicnic,

    Agree with others, you should “Allow” this filrewall rules, this rule will Improve or optimize the quality of meetings.

    Best Regards,
    Leon Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.


    Wednesday, September 12, 2018 2:22 AM
  • Dear Caki,

    thank you, this is really helpful!

    I also found the according sheet which contains some further neat information:

    https://docs.microsoft.com/en-us/skypeforbusiness/plan-your-deployment/clients-and-devices/meetings-clients

    Thanks and best regards

    Nico

    Wednesday, September 12, 2018 6:10 AM
  • Thank you!
    Wednesday, September 12, 2018 6:11 AM
  • Dear Thenicnic,

    I was glad I was able to help you !

    Please mark the answer for future reference !

    Wednesday, September 12, 2018 6:15 AM