[cisco-voip] CCX 12.5 SU1 HTTP Trigger doing 302 Redirect

[Lelio Fulgenzi]

Oh sure. They add this, but they won’t add admin page protection. Ugh.

From: cisco-voip <cisco-voip-bounces at puck.nether.net> On Behalf Of Erick Bergquist
Sent: Saturday, September 4, 2021 4:42 PM
To: Matthew Loraditch <MLoraditch at heliontechnologies.com>
Cc: cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] CCX 12.5 SU1 HTTP Trigger doing 302 Redirect

CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to IThelp at uoguelph.ca<mailto:IThelp at uoguelph.ca>

Look under enterprise parameters, there was a recent change in cucm / cuc around this to.

Trusted list of hosts in http refer field.

Not sure where this would be in ccx offhand though( have not looked yet).


On Wed, Sep 1, 2021 at 8:23 AM Matthew Loraditch <MLoraditch at heliontechnologies.com<mailto:MLoraditch at heliontechnologies.com>> wrote:
We have a CCX NAT’d to the internet with appropriate firewall rules in place to allow only a specific 3rd party to place http trigger calls.

Before SU1 Install (12.5 Based with ESs) this worked.

Now a call to an http trigger via https://dnsnameforuccx.co:9443/AppName?Params is 302 redirecting to https://internalipofuccx:9443/AppName?Params
Same thing happens if we use the external ip.

Is anyone aware of anything that would cause this? I can’t find anything in the release notes or bugs (albeit they are not the easiest to find).

May have to build a VPN, we avoided that previously because it’s billable.











Matthew Loraditch​
Sr. Network Engineer
(He/Him/His)
p: 443.541.1518<tel:443.541.1518>
w: www.heliontechnologies.com<http://www.heliontechnologies.com/>
 |
e: MLoraditch at heliontechnologies.com<mailto:MLoraditch at heliontechnologies.com>
[Helion Technologies]<http://www.heliontechnologies.com/>
[Facebook]<https://facebook.com/heliontech>
[Twitter]<https://twitter.com/heliontech>
[LinkedIn]<https://www.linkedin.com/company/helion-technologies>
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20210905/6221cd22/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 9409 bytes
Desc: image001.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20210905/6221cd22/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 431 bytes
Desc: image002.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20210905/6221cd22/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 561 bytes
Desc: image003.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20210905/6221cd22/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 444 bytes
Desc: image004.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20210905/6221cd22/attachment-0003.png>