I am trying to activate a Windows 2012 Standard server in a VM on my 2008 server. The operation times out and cannot connect to activate, yet I can browse my internal network and use the web browser for external sites. So, I know that network connectivity is working just fine.
Watching the Web Filter log, it shows no block attempts for microsoft.com domains, and I am seeing access there.
I am not getting anything at all in IPS or ATP live logs as I watch them. However, I am seeing in the Firewall live log, the TCP 443 port being blocked for the activation IP address for sls.microsoft.com, the domain that machines connect to in order to activate their Windows versions.
19:08:40 Default DROP TCP
65.52.98.231 : 443
→
172.18.0.15 : 49254
[ACK FIN] len=40 ttl=64 tos=0x00 srcmac=00:30:18:c4:f8:84
19:08:40 Default DROP TCP
65.52.98.231 : 443
→
172.18.0.15 : 49254
[ACK PSH FIN] len=40 ttl=64 tos=0x00 srcmac=00:30:18:c4:f8:84
19:08:40 Default DROP TCP
65.52.98.231 : 443
→
172.18.0.15 : 49254
[ACK PSH FIN] len=40 ttl=64 tos=0x00 srcmac=00:30:18:c4:f8:84
19:08:41 Default DROP TCP
65.52.98.231 : 443
→
172.18.0.15 : 49254
[ACK PSH FIN] len=40 ttl=64 tos=0x00 srcmac=00:30:18:c4:f8:84
19:08:43 Default DROP TCP
65.52.98.231 : 443
→
172.18.0.15 : 49254
[ACK PSH FIN] len=40 ttl=64 tos=0x00 srcmac=00:30:18:c4:f8:84
19:08:46 Default DROP TCP
65.52.98.231 : 443
→
172.18.0.15 : 49254
[ACK PSH FIN] len=40 ttl=64 tos=0x00 srcmac=00:30:18:c4:f8:84
19:08:52 Default DROP TCP
65.52.98.231 : 443
→
172.18.0.15 : 49254
[ACK PSH FIN] len=40 ttl=64 tos=0x00 srcmac=00:30:18:c4:f8:84
19:09:06 Default DROP TCP
65.52.98.231 : 443
→
172.18.0.15 : 49254
[ACK PSH FIN] len=40 ttl=64 tos=0x00 srcmac=00:30:18:c4:f8:84
I created a specific HTTPS rule to allow all traffic for that port, I even went as far as Any Any Any on one setting. I disabled IPS/ATP/Web Filtering. it is still being blocked, and I cannot activate.
UTM has turned into a dog with a bone on this. Doesn't seem to matter what I do to get around this, UTM is just going to tell me to f-off.
My only thing left to do is connect my server directly to the ISP modem to get anywhere with this. Not at all what I want or should have to do with this.
This thread was automatically locked due to age.
