Connection issues for Microsoft (Skype, Office365) after enabling DPI services

12/20/2019 219 People found this article helpful 114,125 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

When you enable App Control and block the signature ID 5 or ID 7, it may cause connection issues with Microsoft applications such as Skype, Skype for Business and Office 365.

SID 5 is for TCP Random Encryption and SID 6 is for UDP Random Encryption.  This article shows you how to create a Access Rule to fix such communication issues for Microsoft Applications. This article also applies to excluding traffic from DPI-SSL.

Resolution

 Create Address Group with Microsoft FQDNs & IPs

1. Login to your SonicWall management page and click Manage tab on top of the page.
2.  Navigate to Objects |Address Objects page. On right Side, Click on Address Groups Tab and select View as Custom.
3. Click Add button under Address Groups, to get Add Address Object Group Window.
4.  Name: MS_Applications.
5.  Add Address Objects, which you created for MS FQDNs & IPs to Right side of table.
6.  Click OK.
   

Skype relevant objects:

Office relevant Objects

You can visit Microsoft Services : Office365 URLs and IPs

Create Access Rule to By-Pass DPI

1. Login to your SonicWall management page and click Manage tab on top of the page.
2. Navigate to Rules | Access Rules page. On right side, click Add button..
3.  In Add Rule Window, create an Access Rule From LAN To WAN zone as below.
4. Then click Advanced and enable Disable DPI  checkbox. Click Add .
   

Related Articles

• How to remove 2FA for admin using CLI
• 2FA authentication error using TOTP "Please try again later"
• Methods to add Address Objects

Categories

• Firewalls > NSa Series > Application Firewall
• Firewalls > NSv Series > Application Firewall
• Firewalls > TZ Series > Application Firewall