Answered by:
Web App: Local firewall rules

Question
-
Hi there,
in our company, the SfB Web App is installed on each client. But when a user joins a meeting the first time, SfB Web App always asks for creating firewall rules in Windows. Since most of the users don't have administrator privileges they click on "Cancel" and everything works fine. This is also the way Microsoft recommends for the users ( support.office.com/en-us/article/trouble-installing-the-skype-for-business-web-app-plug-in-958fc5f1-2d6f-42e3-815d-a9516c591274 ).
Now we'd like to deploy the local firewall rules sitewide and we wonder if we have any benefits if we set them to "Allow" instad of the default "Block". They are application-based for a executable called "pluginhost.exe".
Does anyone know which is the better state?
Thanks and best regards
Tuesday, September 11, 2018 9:34 AM
Answers
-
Hello Thenicnic,
It would be better to "Allow" the application through firewall.
As you said, even if the user cancels the prompt they still can join the meeting and everything is working fine, but the "Allow" firewall rule helps in optimization and quality.
This is what Microsoft is saying on the firewall prompt:
Users may see a firewall warning the first time they run the meetings app. They may be prompted to open ports to optimize the experience, and this may require Admin privileges on the machine they may not have. The app should still function and the user can safely decline to open the requested ports.
Hope this helps !
- Proposed as answer by Leon-LuMicrosoft contingent staff Wednesday, September 12, 2018 2:22 AM
- Marked as answer by thenicnic Thursday, September 13, 2018 8:19 AM
Tuesday, September 11, 2018 9:42 AM -
Hi Thenicnic,
Agree with others, you should “Allow” this filrewall rules, this rule will Improve or optimize the quality of meetings.
Best Regards,
Leon Lu
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.- Edited by Leon-LuMicrosoft contingent staff Wednesday, September 12, 2018 2:22 AM
- Proposed as answer by Leon-LuMicrosoft contingent staff Wednesday, September 12, 2018 2:22 AM
- Marked as answer by thenicnic Thursday, September 13, 2018 8:19 AM
Wednesday, September 12, 2018 2:22 AM
All replies
-
Hello Thenicnic,
It would be better to "Allow" the application through firewall.
As you said, even if the user cancels the prompt they still can join the meeting and everything is working fine, but the "Allow" firewall rule helps in optimization and quality.
This is what Microsoft is saying on the firewall prompt:
Users may see a firewall warning the first time they run the meetings app. They may be prompted to open ports to optimize the experience, and this may require Admin privileges on the machine they may not have. The app should still function and the user can safely decline to open the requested ports.
Hope this helps !
- Proposed as answer by Leon-LuMicrosoft contingent staff Wednesday, September 12, 2018 2:22 AM
- Marked as answer by thenicnic Thursday, September 13, 2018 8:19 AM
Tuesday, September 11, 2018 9:42 AM -
Hi Thenicnic,
Agree with others, you should “Allow” this filrewall rules, this rule will Improve or optimize the quality of meetings.
Best Regards,
Leon Lu
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.- Edited by Leon-LuMicrosoft contingent staff Wednesday, September 12, 2018 2:22 AM
- Proposed as answer by Leon-LuMicrosoft contingent staff Wednesday, September 12, 2018 2:22 AM
- Marked as answer by thenicnic Thursday, September 13, 2018 8:19 AM
Wednesday, September 12, 2018 2:22 AM -
Dear Caki,
thank you, this is really helpful!
I also found the according sheet which contains some further neat information:
https://docs.microsoft.com/en-us/skypeforbusiness/plan-your-deployment/clients-and-devices/meetings-clients
Thanks and best regards
Nico
Wednesday, September 12, 2018 6:10 AM -
Thank you!Wednesday, September 12, 2018 6:11 AM
-
Dear Thenicnic,
I was glad I was able to help you !
Please mark the answer for future reference !
Wednesday, September 12, 2018 6:15 AM