locked
Skype for Business mobile login RRS feed

  • Question

  • Hi,

    Can we login into Skype for Business on mobile device with Corporate wifi without allowing external access ?

    -James


    -James

    Monday, June 24, 2019 1:23 PM

Answers

  • Hi James,

    Within internal WiFi, mobile client traffic will hit firewall and return back to internal via hairpin function, then go through RP server, change the port from 443 to 4443, and hit the Skype external web site.  

    It is important to change the traffic port to 4443 to hit the external web site.

    I think it is better to follow the official deployment.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Proposed as answer by Shaw_Lu Friday, June 28, 2019 2:04 AM
    • Marked as answer by James Jac Wednesday, July 3, 2019 10:20 AM
    Wednesday, June 26, 2019 7:19 AM

All replies

  • Hi James,

    Please refer to this article about “Plan for Mobility for Skype for Business Server”. It doesn’t notice external access policy, it needs to deploy mobility policy.

    Mobile client would always connect to the Ucwa service in “External Web Site” by Reverse Proxy Server, no matter where the device is connected (internal WiFi or 4G network).

    For just sign-in and IM function, it would not use Edge server, the traffics all go through RP server.

    Please refer to the following articles for more details:

    https://docs.microsoft.com/en-us/lyncserver/lync-server-2013-technical-requirements-for-mobility


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Proposed as answer by Shaw_Lu Friday, June 28, 2019 2:03 AM
    Tuesday, June 25, 2019 6:40 AM
  • Hi Shaw,

    As per Microsoft, regardless of whether a mobile device is internal or external, the device always connects to the Skype for Business Server Mobility service externally, through reverse proxy.

    In our scenario, users are not allowed to login into Skype client externally so traffic will not come directly to Reverse Proxy. Is there any alternative available ?


    -James

    Tuesday, June 25, 2019 8:40 PM
  • Hi James,

    Within internal WiFi, mobile client traffic will hit firewall and return back to internal via hairpin function, then go through RP server, change the port from 443 to 4443, and hit the Skype external web site.  

    It is important to change the traffic port to 4443 to hit the external web site.

    I think it is better to follow the official deployment.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Proposed as answer by Shaw_Lu Friday, June 28, 2019 2:04 AM
    • Marked as answer by James Jac Wednesday, July 3, 2019 10:20 AM
    Wednesday, June 26, 2019 7:19 AM
  • Hi,

    Do you have any further issue on this topic?

    Meanwhile, if there is no issue, please remember to mark helpful reply as answer to close the thread. Your action would be helpful to other users who encounter the same issue and read this thread.

    Thanks for your understanding.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Tuesday, July 2, 2019 6:36 AM