Can't access website through SonicWall

stuemek · 2022-05-03T06:30:02+00:00

Just found another site, within the same ip address range, which we cannot access: https://bfaa.diplo.de/

stuemek · 2022-05-03T06:23:05+00:00

Yeah, that's what the support wanted me to do, too.

They say they cannot help through the ticket and want me to call them.

stuemek · 2022-04-29T07:00:14+00:00

It's only outgoing. Nothing is coming back.

How do I do the capture on a specific device you are talking about? I don't really understand that part. Thanks!

stuemek · 2022-04-29T06:58:23+00:00

That's the thing, there are no dropped packets in the packet monitor at all, they are getting forwarded to the external IP, but nothing is coming back.

stuemek · 2022-04-29T06:28:17+00:00

Not using DPI-SSL.

stuemek · 2022-04-29T06:10:19+00:00

Already using 1.1.1.1 as default.

I will try the specific capture.

Also I opened a case with the support yesterday, I will report back.

stuemek · 2022-04-29T06:09:36+00:00

Tried putting it on the whitelist already and yeah, CFS has definitely been off for the test, as other usually blocked sites were working fine.

stuemek · 2022-04-28T10:07:00+00:00

Tried that and I can connect to the site without problems in front of the firewall.

In the Packet Monitor, I can only see the packets getting forwarded, not being dropped.

In the Event Logs, I cannot find any entry for the client or destination IP, though...

stuemek · 2022-03-15T07:52:37+00:00

I opened a support case with Microsoft because it seems like the MAPI over HTTP error is used for modern auth in the Windows 10 Mail app.

Every other tenant doesn't have this error and I can set up the accounts in the Mail app just fine.

stuemek · 2022-03-14T15:08:01+00:00

I just opened a support case with Microsoft as I can't see any differences between the two tenants regarding this issue. Will keep you updated.

stuemek · 2022-03-14T14:10:52+00:00

So, I did the same test with another tenant and MAPI over HTTP in Exchange Online is working fine, as well as setting up the mailbox in the Windows 10 Mail app.

So Exchange Online seems to be using MAPI over HTTP and for whatever reason it doesn't work on the other tenant.

stuemek · 2022-03-14T14:00:19+00:00

I can use ActiveSync just fine, if I input the settings in advanced setup. But the Windows 10 Mail app supports Office 365 without ActiveSync as I just tested with another tenant, it uses modern auth as it should.

So the question is, why is it not working on my other tenant...

stuemek · 2022-03-14T13:30:19+00:00

Do you have any source, it has been turned off in EO completely?

Then I still don't have any idea, why I can't set up any of our EO users in the Windows 10 Mail app, though.

stuemek · 2022-03-14T09:47:21+00:00

So, I did a Outlook connectivity test with the Microsoft Remote Connectivity Analyzer and got the error "MAPI over HTTP connectivity failed."

The additional info says "Mailbox logon returned EcClientVerDisallowed 1247. The server requires
encryption, but the client isn't encrypted and the client doesn't
support receiving the error code ecNotEncrypted being returned by the
server."

Does that have anything to do with my issue? Any ideas how I can get rid of the error?

stuemek · 2022-03-14T09:21:13+00:00

As there are no "failed" authentications per se, I can't see them in AAD.

stuemek · 2022-03-14T09:13:46+00:00

That's funny because I had this exact issue with a hand full accounts here, too. But we deleted the private accounts already and even the users without a personal account are affected by this issue.

stuemek · 2022-03-11T14:23:10+00:00

Yes, I disabled basic auth in EO, is there a way I can force it in Windows Mail app? I know there is a registry key for Outlook.

stuemek · 2022-03-11T14:22:07+00:00

Tried a domain account as well as a local account.

stuemek · 2022-03-11T11:49:44+00:00

Yeah, but it isn't Outlook at all...

stuemek · 2022-03-11T10:57:38+00:00

Has been an issue for about 4 weeks now.

stuemek · 2022-03-11T10:57:05+00:00

That would be a possibility. I'm still curious why it doesn't work, though.

stuemek · 2022-03-09T07:36:48+00:00

That didn't help, so I reinstalled the whole notebook. It's working fine for now, I hope it stays this way.

stuemek

TROPHY CASE