Blocking Ghost Calls on Polycom RealPresence GroupSeries 500

[sd1233]

Hello,

Here is hte information on my Polycom RealPresence GroupSeries 500:

Model: Realpresence Group 500

System Software: Realease - 5.0.0-211246

Maintenance/Warranty Status: None/Expired

I am getting ghost calls to the polycom.  The person dialing  in is using 1001@polycomIPAddress.  For example, the incomming ghost call looks like, 1001@123.456.78.910.  Note, I did not use the device's real IP address.

Can I block the address of the incomming call?

<Please Advise>

Thanks,

sd1233

[mschulze]

Hi sd1233,

A local Firewall or a Polycom Firewall traversal solution can be utilized to stop this. But there are several threads about this topic in this community, please use the search function.

[Polycom Video EP PLM]

The first recommendation would be to get up to date on the software.  The software you are running is from Sept, 2015.  There have been a host of security updates since then.

You can look at the release notes and the Admin Guide for information on security enhancements since then.  This documentation is at www.polycom.com/videodocumentation

You can also access the security center at <here> for additional security information.  

[Yong JI]

Hi, i have done update to the latest firmware 6.1.7.1 but also keep receving ghost call:

2850@192.168.1.39

2851@192.168.1.39

641@192.168.1.39

1781@192.168.1.39

1001@192.168.1.39

Kindly advise.

[SteffenBaierUK]

Hello @Yong JI,

welcome to the Polycom Community.

Please ensure you always check the FAQ's and/or utilize the community search before posting any new topics or follow up post’s.

Apr 07,2015 Question: How can I prevent Phantom calls to my Video Solution?

Answer: A local Firewall or a Polycom Firewall traversal solution can be utilized to stop this. In order to add this to a possible future Software version in the form of a whitelist please open a Feature Request or check the Security Center: Security Bulletin Relating to Worldwide Botnet Dialing H.323-Capable Systems

In order to request a blacklist / whitelist feature added to the Polycom GroupSeries you would require a feature request.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

[Yong JI]

Hi Steffen,

Sorry for the late reply. The User now have reset the ip and the ghost call had disappeared. But another issue occur. the caller ables to see the user video and audio but couldn't see the caller video and audio at the far end. Kindly advise for such issue occur and any ports is required to open?

User had already open certain ports:

TCP 1720

TCP 3230 to 3243

UDP 3230 to 3341

TCP 49152 to 65535

UDP 16384 to 32764

Best Regards,

Yong Ji

[Polycom Video EP PLM]

If the far end is not receiving the audio and the video it is most likely the firewall at that end.  They need to enable H.323 and / or SIP for videoconferencing in the firewall.

There are test numbers to dial to confirm the issue end, try using 71.14.2.157 or .158 as a test point.  It is a heavily used site so it may take more than one try to get throug to it.  Located in the Atlanta, GA, USA area.