This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

office 2021 activation blocked

TarekHalloun 11 months ago

hello

I have an xg210 and im trying to allow the activation of office 2021

i added all the urls in the web exception , and gave allow all to a specific ip to test , still it is not working

nothing is shown as blocked in the logs

edit : when i install wireshark , it works !

what can i check exactly ?

so i was able to pinpoint the internet status of office is related to the Network Connection Status Indicator (NCSI) of microsoft .. i am trying to allow access to the servers of NCSI for everyone in my subnet . i added them to the web exception but it didnt work .. should i have a firewall rule for everyone to allow access ( other than the initial deny rule ) ? shouldnt the exception work for everything ??

please enlighten me

This thread was automatically locked due to age.

Top Replies

AstaroNBack 8 months ago in reply to TarekHalloun +2 suggested

NCSI False "no internet" status Microsoft NCSI is a Windows service that determines whether the computer is connected to the Internet. If it thinks you are not connected, (Even though your are) Office…

Parents

0 Vivek Jagad 11 months ago

Hello TarekHalloun,

Thank you for reaching out to the community, you may refer the following article below:
Configure web exceptions for Office 365: https://support.sophos.com/support/s/article/KB-000038173?language=en_US

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 TarekHalloun 11 months ago in reply to Vivek Jagad

i added the exceptions and it works if i have allow all

other users with some limitations are still block , as if the exception did not work
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 11 months ago in reply to TarekHalloun

Can you perform a packet capture to see from which rule the traffic passes through when it does not work !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 TarekHalloun 11 months ago in reply to Vivek Jagad

the connection to microsoft passes through the correct rule related to the user's ip , it shows as green with no blocking
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 11 months ago in reply to TarekHalloun

And if you add a FW rule into the IPS exception:
Bypass a specific firewall rule for Application Classification and ATP: https://support.sophos.com/support/s/article/KB-000038900?language=en_US

See if this helps !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 TarekHalloun 11 months ago in reply to Vivek Jagad

what does this do ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 11 months ago in reply to TarekHalloun

it will Bypass a specific firewall rule for Application Classification and ATP

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad 11 months ago in reply to TarekHalloun

it will Bypass a specific firewall rule for Application Classification and ATP

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 TarekHalloun 11 months ago in reply to Vivek Jagad

but then all the restrictions i made on this rule will not work .. not a good solution
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 11 months ago in reply to TarekHalloun

It was just to confirm whether that works or not, and if that works then support can help you investigate further in that direction !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 TarekHalloun 11 months ago in reply to Vivek Jagad

how can i select which rule to disable the atp?
i see the command : set ips ac_atp exception fwrules 1,2.

is 1,2 the rule number ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 11 months ago in reply to TarekHalloun

That's correct in your case the rule no is 7 so the command will be as follows:
set ips ac_atp exception fwrules 7

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 TarekHalloun 11 months ago in reply to Vivek Jagad

same issue
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 11 months ago in reply to TarekHalloun

Now this has to be further investigated by support !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 TarekHalloun 11 months ago in reply to Vivek Jagad

i have a case since 3 days but no one is answering : 05372046
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 11 months ago in reply to TarekHalloun

Just checked in with the Support team, they'll revert you soon !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel