Teams phones and firewalls

%3CLINGO-SUB%20id%3D%22lingo-sub-1613483%22%20slang%3D%22en-US%22%3ETeams%20phones%20and%20firewalls%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1613483%22%20slang%3D%22en-US%22%3E%3CP%3EA%20customers%20network%20people%20created%20a%20separate%20vlan%20for%20the%20Teams%20phones.%20When%20trying%20to%20use%20either%20the%20%22Web%20Sign-in%20(Cloud)%22%20or%20%22CAP%20provisioning%22%2C%20they%20get%20%22Web%20Sign-in%20(Cloud)%20failed%20Signing%20Out%22.%26nbsp%3B%20Are%20the%20firewall%20ports%20required%20for%20the%20phones%20the%20same%20found%20in%20the%20full%20IP%20and%20URL%20list%3F%3CBR%20%2F%3EThey%20never%20get%20the%20web%20address%20link%20and%20code%20to%20sign%20in.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1613483%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EFirewall%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ephones%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESign-in%20failed%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETeams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1620199%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20phones%20and%20firewalls%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1620199%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F227289%22%20target%3D%22_blank%22%3E%40Jake%20Jacobs%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20will%20ultimately%20be%20connecting%20to%20the%20Teams%20service%2C%20so%20yes%20the%20same%20exceptions%20would%20need%20to%20be%20in%20place%20I%20am%20sure.%20Can%20you%20see%20if%20anything%20is%20getting%20blocked%20on%20the%20network%20side%3F%20Also%20out%20of%20interest%20what%20model%20of%20phone%20is%20being%20used%20for%20CAP%20purposes%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHenry%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1623677%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20phones%20and%20firewalls%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1623677%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F693840%22%20target%3D%22_blank%22%3E%40henryarphillips365%3C%2FA%3E%26nbsp%3B%20mainly%20405HD%20for%20this%20project.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

A customers network people created a separate vlan for the Teams phones. When trying to use either the "Web Sign-in (Cloud)" or "CAP provisioning", they get "Web Sign-in (Cloud) failed Signing Out".  Are the firewall ports required for the phones the same found in the full IP and URL list?
They never get the web address link and code to sign in.

3 Replies

Hi @Jake Jacobs,

 

It will ultimately be connecting to the Teams service, so yes the same exceptions would need to be in place I am sure. Can you see if anything is getting blocked on the network side? Also out of interest what model of phone is being used for CAP purposes?

 

Thanks

 

Henry

@HenryPhillipsNimbitech  mainly 405HD for this project.

I was wondering if you figured out this issue?  I don't see a conditional access issue and the login appears to be successful in the log files.  I suspect it is conditional access based on location and policy but nothing appears in the logs to indicate this.  @Jake Jacobs