Exchange 2016 behind Sophos UTM SG230. Followed the Exchange 2016 and WAF configuration - KB-000038003 to configure.
Clients had intermittent connectivity issues.
Microsoft Connectivity Analyzer - Outlook Connectivity RPC over HTTP test failed - Could not ping RPC proxy - Error 403
Opened a ticket with Sophos and they determined that this was caused by not having /Rpc/* in the exception list of the Webserver Protection - Firewall Profiles.
Support should be updating the KB
This thread was automatically locked due to age.