Identifying Skype sessions
If Skype is in use on your network, Skype sessions may appear on the Top Sessions By Application list with the Application Name displayed as unknown. You can help the FortiGate unit identify Skype sessions by using the following command to add the public IP address of your network to the FortiGate configuration.
For example, if the IP address of the FortiGate interface connected to the Internet is 172.20.120.14 and if the security policies for connections to the Internet have source NAT enabled, enter the following command to add the public IP address of your network which is the public address used by Skype sessions:
config ips global
set skype-client-public-ipaddr 172.20.120.14
end
You can add multiple IP addresses with this command. This can be useful if your network or your Skype sessions have more than one public IP address. For example, you may have multiple Internet connections each with a different IP address. Also, if the external IP address is set using DHCP or PPPoE it may change and you can add multiple IP addresses to help account for this. Use the following command to add multiple public IP addresses (separate the addresses with a comma and no spaces).
config ips global
set skype-client-public-ipaddr 172.20.120.14,10.10.10.20
end
| You may not have direct knowledge of your network’s public IP address. This can happen for a number of reasons, depending on your network configuration. For example, your FortiGate unit may not be connected directly to the Internet. To make sure you are adding the right IP addresses you can use free services such as WhatIsMyIP.com to verify your network’s public IP address. |