Thread Info
  • State Suggested Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 33 subscribers
  • Views 28982 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Communication with office 365 products

NicoVerheyen

Hi,

we experience serveral problems for our clients behind an XG firewall that are trying to comunicate with the microsoft services.

problems experienced:

- office-  (and some windows- ) updates not working.

- onedrive sync interruptions/new files not arriving after online update.

- outlook not receiving the latest mails spontaneously. Restarting outlook receives new mails.

 

By adding some lines in the Web Exceptions, I managed to solve the first 2 problems. there's a "Microsoft windows update" exception that I altered to:

^([A-Za-z0-9.-]*\.)?edgesuite\.net/
^([A-Za-z0-9.-]*\.)?microsoft\.com/
^([A-Za-z0-9.-]*\.)?office365\.com/
^([A-Za-z0-9.-]*\.)?office\.com/
^([A-Za-z0-9.-]*\.)?windowsupdate\.com/
 
only problem remaining is that new mails are not flowing in without restarting outlook. I'm experiencing this for several customers behind seperate XG firewalls.
 
does anyone have any sugestions please?


This thread was automatically locked due to age.
Parents
  • 0

    I now have disabled both web and application filtering (set to none) and the problem still persists. Looks like the client is still asuming the connection is active and that push notifications are not send to the client.

    The connection state for outlook 2016 is connected.

     

    Allthough i agree this could be a problem within outlook and/or office 365, i want to stress that I see this behaviour/problem on 2 seperate clients, with 2 seperate domains and online tenants. Only similarity is the presence of a sophos firewall. an XG115 and an XG210. Both on latest firmware.

     

    Then, i noticed these posts: 

    - https://community.sophos.com/products/xg-firewall/sophos-xg-beta-programs/sfos-v170-beta/f/sfos-v170-beta-feedback/95909/fw-log-could-not-assocate-packet-to-any-connection-when-ips-enabled

    - https://community.sophos.com/products/xg-firewall/sophos-xg-beta-programs/sfos-v170-beta/f/sfos-v170-beta-feedback/96650/numerous-could-not-associate-packet-to-any-connection-messages-in-the-firewall-log

     

    looking at the firewall log, i see similar patterns. traffic is denied, after seeing a similar trafic working several mintutes before.

    Time,Log Comp,Action,Username,Firewall Rule,In Interface ,Out Interface ,Source IP,Destination IP,Source Port,Destination Port,Protocol,Rule Type,Message ID,Live PCAP,Message,
    2018-04-25 11:29:56,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,65020,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 11:29:56,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,65020,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 11:29:25,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,65020,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 11:28:40,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,65020,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 11:28:05,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,65020,443,TCP,1,00001,Open PCAP,,
    2018-04-25 11:08:19,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64619,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 11:08:19,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64619,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 11:08:03,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,64619,443,TCP,1,00001,Open PCAP,,
    2018-04-25 10:56:05,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:55:20,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:54:35,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:53:50,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:53:05,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:52:20,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:51:35,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:50:50,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:50:05,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:49:20,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:48:35,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 10:48:00,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,64171,443,TCP,1,00001,Open PCAP,,
    2018-04-25 10:28:05,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,63823,443,TCP,1,00001,Open PCAP,,
    2018-04-25 09:37:47,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,62791,443,TCP,1,00001,Open PCAP,,
    2018-04-25 09:27:45,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,62600,443,TCP,1,00001,Open PCAP,,
    2018-04-25 09:07:41,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,62270,443,TCP,1,00001,Open PCAP,,
    2018-04-25 08:17:31,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,61192,443,TCP,1,00001,Open PCAP,,
    2018-04-25 08:15:34,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:14:49,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:14:04,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:13:19,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:12:34,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:11:49,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:11:04,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:10:19,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:09:34,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:08:49,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:08:04,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 08:07:29,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,61021,443,TCP,1,00001,Open PCAP,,
    2018-04-25 07:57:26,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,60857,443,TCP,1,00001,Open PCAP,,
    2018-04-25 07:37:21,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,60488,443,TCP,1,00001,Open PCAP,,
    2018-04-25 07:17:16,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,60153,443,TCP,1,00001,Open PCAP,,
    2018-04-25 06:35:08,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:34:23,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:33:38,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:32:53,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:32:08,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:31:23,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:30:38,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:29:53,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:29:08,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:28:23,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:27:38,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:27:03,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,59307,443,TCP,1,00001,Open PCAP,,
    2018-04-25 06:25:07,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:24:22,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:23:37,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:22:52,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:22:07,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:21:22,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:20:37,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:19:52,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:19:07,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:18:22,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:17:37,Invalid Traffic,Denied,,0,,,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,0,01001,Open PCAP,Could not associate packet to any connection.,
    2018-04-25 06:17:02,Firewall Rule,Allowed,,2,Lag10Gbit.2,Port2,192.168.0.60 ,104.225.98.130 ,59150,443,TCP,1,00001,Open PCAP,,
  • 0 in reply to NicoVerheyen

    I've now put an XG Home in my testlab and am experiencing the same problem. outlook to o365 issue. Push notifications are not comming in. therefor i need to restart my outlook to make te latest mails come in. So this is the 3 location with different OS, office version that has the same issue behind an up to date XG firewall.

  • 0 in reply to NicoVerheyen

    Ok, after talking to support i have confirmation that the webproxy of the XG is causing this issue. They send me a list of ~250 url exceptions to add. that's quite a lot, knowing we have quite some XG firewalls running.

     

    I compiled an import file to import the complete list to the Web -> exceptions list. (no existing will be touched, unless the have the same Name 'Office 365').
    Let me know if someone wants it.

     

    I'll come back and post results. No user feedback yet, but works in my lab.

  • 0 in reply to NicoVerheyen

    would be great to get a copy of that import list.

    how is it going since you applied it?

    thanks

  • 0 in reply to NicoVerheyen

    Hello,

     

    I experience the same problem on Outlook connected to Office365 which not sync the latest mail after some inactivity time, untill we restart Outlook.

     

    Could you please send the import file with urls ? And the right way to import it in all of the XG's of my custommers without adding 1 by 1 the urls into the firewalls...

     

    Thank you ! 

Reply
  • 0 in reply to NicoVerheyen

    Hello,

     

    I experience the same problem on Outlook connected to Office365 which not sync the latest mail after some inactivity time, untill we restart Outlook.

     

    Could you please send the import file with urls ? And the right way to import it in all of the XG's of my custommers without adding 1 by 1 the urls into the firewalls...

     

    Thank you ! 

Children
No Data