Thread Info
  • State Not Answered
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Subscribers 7 subscribers
  • Views 15224 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Win 7, "No Internet Access" when Web Filtering enabled, but Internet works fine

CraigAustin

The support portal won't take my serial # or I'd open a ticket with support. :(  SG135, current firmware.

Problem is as described.  With Web Filtering enabled, Transparent mode, my PC's have the yellow exclamation point in the network status icon and it says "No Internet Access".  However, everything works fine.  Web Filter is basically at the default settings besides me changing some filtered categories.  As soon as I turn off Web Filtering, the icon changes to normal after a few minutes.

According to this technote:

https://technet.microsoft.com/en-us/library/cc766017(v=ws.10).aspx

that "feature" checks a few things.  All workstations can connect to what this "feature" allegedly checks - http://www.msftncsi.com/ncsi.txt resolves and displays, a request for DNS name resolution of dns.msftncsi.com resolves properly, etc.  I have tried adding msftncsi.com as a trust site and so forth with no fix.

I've been telling my users to ignore it as it's just cosmetic but recently some Microsoft apps, namely Office 2016, checks the status of this "feature" and fails activation immediately without even trying.

Ideas?  I can't believe I'm the only one having this issue but I've done exhaustive searches over the past 8 months or so.



This thread was automatically locked due to age.
Parents
  • 0

    You may want to run wireshark on the workstation to do a packet capture while Windows is doing it's check.  Then you can see if/how one of those checks is failing.  Since one of the checks is a DNS check you might want to look at that as well.

    In the UTM, changing a site reputation to Trusted will not make a difference.  You may want to try an exception instead.  However I don't think what you are experiencing is common so I would investigate first.

    If all else fails, as the MS article says, you can turn it off with a registry setting.

Reply
  • 0

    You may want to run wireshark on the workstation to do a packet capture while Windows is doing it's check.  Then you can see if/how one of those checks is failing.  Since one of the checks is a DNS check you might want to look at that as well.

    In the UTM, changing a site reputation to Trusted will not make a difference.  You may want to try an exception instead.  However I don't think what you are experiencing is common so I would investigate first.

    If all else fails, as the MS article says, you can turn it off with a registry setting.

Children
Unfiltered HTML