anybody seeing issues with XG17 causing Outlook desktop client losing "sync" with Office365.

We have seen this issue randomly as well after upgrading from 16.5 to 17.3 and then to 17.5. Seemed to make the issue not happen as often but we still get a couple of reports a week. We were using load balancing on the FW rule. When we changed it to use one ISP connection we noticed outlook quit syncing until we restarted outlook.

Anyone else using load balancing that is seeing this issue?

We have seen this issue randomly as well after upgrading from 16.5 to 17.3 and then to 17.5. Seemed to make the issue not happen as often but we still get a couple of reports a week. We were using load balancing on the FW rule. When we changed it to use one ISP connection we noticed outlook quit syncing until we restarted outlook.

Anyone else using load balancing that is seeing this issue?

Hi,

Try this:

Open cli and choose option 4

Execute the command:

set routing wan-load-balancing session-persistant source-only ip-family all

Hey Rodrigo,

Were you having a similar issue and this resolve it? The command binds the session to the wan port it started on I assume? I am fairly new to sophos firewalls.

Rodrigo Pereira said:

Hi,

Try this:

Open cli and choose option 4

Execute the command:

set routing wan-load-balancing session-persistant source-only ip-family all

 

hmm, so is the idea that as the WAN address changes due to load-balancing, that it messes up the sync between Outlook and Office365?

I do have dual-WAN connections that i am doing load-balancing, but it isn't done at the Sophos level.  I only have one WAN connection into the Sophos Firewall .  there is an upstream Velocloud unit that deals with the load-balancing/failover along with the corporate SD-WAN. 

Yes, I think that the problem is the session persistence. Office365 uses ssl session. Try to do the similar configuration on your balancer.

We do not have load balancing on our setup and we are experiencing this issue. If i turn off http scanning the issue seems to go away.  That would honestly defeat the purpose of having the XG in the first place.