This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Issue with clients behind RED 10 using Outlook 2013

Good Morning -

We have a RED 10 device setup in Standard/Split mode connected to a UTM 9.312-8. This week we updated a couple clients from Outlook OWA to the Outlook 2013 office application. Outlook is connecting to a hosted exchange server. Users at the main office (behind the SG135) have been using the Outlook 2013 office application without issue for over 6 months. The two users who are in the remote office behind the RED 10 are having issues staying connected. After launching Outlook 2013 it will connect and function correctly for about 10 minutes. Then outlook will lock up with a message about trying to connect to Microsoft exchange. At first we troubleshooted this issue under the assumption that we had an issue with outlook and our hosted exchange. Finally for testing purposes, we took both clients off of the RED and put them on a separate stand alone firewall and they no longer are having an issue. This tells me that the issue has something to do with the RED 10 device and the SG135 UTM. Does anyone have an idea on where to start to help resolve this issue?

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

Based on the DNS used by those client machines, are those remote clients connecting directly to the hosting server or through the RED tunnel/SG135?

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 matt_ss over 9 years ago

The remote clients shouldn't be going through the Tunnel, only inside traffic should be routed...but I have a feeling something is going on that is causing that traffic to be routed through the tunnel. How would I verify?
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

First do a DNS lookup on the clients for the address they are using to connect. You can also packet sniff on the utm side using TCPDump.

Are these clients wired PCs or wireless phones or tablets? If wireless, how is your wi-fi setup?

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 matt_ss over 9 years ago

Forgot to mention in my above post, that I did do a nslookup on the exchange server address and it does NOT go through the tunnel. if the RED looses tunnel connectivity, and then re-connect, would that affect the outlook connectivity and "lock" it up? Because at least once every 30 minutes the RED 10 will loose connection with the UTM (this connection is only down for less then 2-3 seconds maybe 5 seconds at the most).
Cancel
Vote Up 0 Vote Down

Cancel
0 matt_ss over 9 years ago in reply to matt_ss

Wired Clients
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

When the RED tunnel goes down, does the RED go through its' reboot process (several of the lights will flash on and off)? This would explain things, as RED fails closed. That is it will not pass any traffic, thereby killing any sessions that Outlook has opened.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 ManuelKarl over 9 years ago in reply to Scott_Klassen

Can you try transparent/split ?
Maybe there's a instable tunnel. Have you e.g. "ping"-drops to an external server (microsoft.com)?
Cancel
Vote Up 0 Vote Down

Cancel
0 matt_ss over 9 years ago

Update****

After working with Sophos, they determined that the RED 10 needed be RMA'd. After I finished with Sophos Tech support, I decided to (against their suggestion) set the RED 10 device to a "Static" uplink mode. Since switching to static, this RED 10 device has been up for over 3 days now with ZERO disconnects and everything has worked as it should. Switching to Static uplink mode has fixed the issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Good to hear

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel