Networks behind a symmetric NAT will not allow direct P2P communication with WebRTC, for these cases you need to configure a TURN server for WebRTC to fall back to.
How does WebRTC work? has a pretty good explanation of why we need TURN servers for WebRTC.
For more details on how to configure this in the GoInstant WebRTC widget take a look at the peerConnectionConfig
option here: https://developers.goinstant.com/v1/widgets/audio_and_video/index.html#parameters