Connection issues for Microsoft (Skype, Office365) after enabling DPI services

12/20/2019 208 31628

DESCRIPTION:

When you enable App Control and block the signature ID 5 or ID 7, it may cause connection issues with Microsoft applications such as Skype, Skype for Business and Office 365.

SID 5 is for TCP Random Encryption and SID 6 is for UDP Random Encryption.  This article shows you how to create a Access Rule to fix such communication issues for Microsoft Applications. This article also applies to excluding traffic from DPI-SSL.

RESOLUTION:

 Create Address Group with Microsoft FQDNs & IPs

1. Login to your SonicWall management page and click Manage tab on top of the page.
2.  Navigate to Objects |Address Objects page. On right Side, Click on Address Groups Tab and select View as Custom.
3. Click Add button under Address Groups, to get Add Address Object Group Window.
4.  Name: MS_Applications.
5.  Add Address Objects, which you created for MS FQDNs & IPs to Right side of table.
6.  Click OK.
   

Skype relevant objects:

Office relevant Objects

You can visit Microsoft Services : Office365 URLs and IPs

Create Access Rule to By-Pass DPI

1. Login to your SonicWall management page and click Manage tab on top of the page.
2. Navigate to Rules | Access Rules page. On right side, click Add button..
3.  In Add Rule Window, create an Access Rule From LAN To WAN zone as below.
4. Then click Advanced and enable Disable DPI  checkbox. Click Add .