This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Office 2016/365 Install Failing with error 30174-4 (1392) - Possible Range Requests Issue

Hello,

I am getting error 30174-4 (1392) when trying to install Office 2016 using the online installer from our Office 365 portal.

I have tried disabling country blocking, adding an Any type rule for one of the clients, etc but I am still seeing the error.

I have added the network ranges suggested by Microsoft in this article.

Spice Works post points to it perhaps being a range request issue and that "Allowing range requests through unmodified" may fix the issue?

Are range request changes supported in Sophos UTM 9.4?

Also if anyone had encountered a similar issue before.

Thanks,
Mark.



This thread was automatically locked due to age.
Parents
  • Is there not a way to do a mass import of these addresses?  Having to enter all of these one at a time is time consuming.  Given the fact that many companies are moving to office 365 I would think Sophos would put this rule in place as a service rule you could turn on or off.  Any help would be appreciated.

  • Hi Trent,

    I agree that there must be an easier way. In the end I had to manually input a lot of IP addresses from the MS Office 365 support article and create firewall rules to allow these blocks of IP address to communicate with the exchange box and for the internal network to communicate back.

    https://support.office.com/en-gb/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-GB&ad=GB

    Hope this helps here is an export of the URL filtering I am using for MS Office 365/Azure under web protection:

    ^https?://([A-Za-z0-9.-]*\.)?azurerms\.com/
    ^https?://([A-Za-z0-9.-]*\.)?cloudapp\.net/
    ^https?://([A-Za-z0-9.-]*\.)?entrust\.net/
    ^https?://([A-Za-z0-9.-]*\.)?geotrust\.com/
    ^https?://([A-Za-z0-9.-]*\.)?glbdns.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?msedge\.net/
    ^https?://([A-Za-z0-9.-]*\.)?msocdn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?office365\.com/
    ^https?://([A-Za-z0-9.-]*\.)?omniroot\.com/
    ^https?://([A-Za-z0-9.-]*\.)?onmicrosoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Portal.cloudappsecurity\.com/
    ^https?://([A-Za-z0-9.-]*\.)?public-trust\.com/
    ^https?://([A-Za-z0-9.-]*\.)?symcb\.com/
    ^https?://([A-Za-z0-9.-]*\.)?symcd\.com/
    ^https?://([A-Za-z0-9.-]*\.)?verisign\.com/
    ^https?://([A-Za-z0-9.-]*\.)?verisign\.net/
    ^https?://([A-Za-z0-9.-]*\.)?agent.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?appsforoffice.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Clientlog.portal.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?crl.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?dc.services.visualstudio\.com/
    ^https?://([A-Za-z0-9.-]*\.)?evsecure-aia.verisign\.com/
    ^https?://([A-Za-z0-9.-]*\.)?evsecure-crl.verisign\.com/
    ^https?://([A-Za-z0-9.-]*\.)?evsecure-ocsp.verisign\.com/
    ^https?://([A-Za-z0-9.-]*\.)?equivio.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?equivioprod*.cloudapp\.net/
    ^https?://([A-Za-z0-9.-]*\.)?Home.Office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?liverdcxstorage.blob.core.windowsazure\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Nexus.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ocsp.msocsp\.com/
    ^https?://([A-Za-z0-9.-]*\.)?office365servicehealthcommunications.cloudapp\.net/
    ^https?://([A-Za-z0-9.-]*\.)?office365zoom.cloudapp\.net/
    ^https?://([A-Za-z0-9.-]*\.)?outlook.office365\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Portal.Office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Prod.msocdn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?products.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?protection.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?sa.symcb\.com/
    ^https?://([A-Za-z0-9.-]*\.)?sd.symcb\.com/
    ^https?://([A-Za-z0-9.-]*\.)?support.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?technet.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?telemetry.remoteapp.windowsazure\.com/
    ^https?://([A-Za-z0-9.-]*\.)?vortex.data.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?www.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?www.remoteapp.windowsazure\.com/
    ^https?://([A-Za-z0-9.-]*\.)?zoom-cs-prod*.cloudapp\.net/
    ^https?://([A-Za-z0-9.-]*\.)?broadcast.skype\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Lync\.com/
    ^https?://([A-Za-z0-9.-]*\.)?infra.lync\.com/
    ^https?://([A-Za-z0-9.-]*\.)?microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?aka.ms\.com/
    ^https?://([A-Za-z0-9.-]*\.)?api.skype\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Graph.skype\.com/
    ^https?://([A-Za-z0-9.-]*\.)?pipe.skype\.com/
    ^https?://([A-Za-z0-9.-]*\.)?users.storage.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?quicktips.skypeforbusiness\.com/
    ^https?://([A-Za-z0-9.-]*\.)?skypemaprdsitus.trafficmanager\.net/
    ^https?://([A-Za-z0-9.-]*\.)?tasks.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?cus-000.tasks.osi.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?ea-000.tasks.osi.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?eus-zzz.tasks.osi.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?neu-000.tasks.osi.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?sea-000.tasks.osi.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?weu-000.tasks.osi.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?wus-000.tasks.osi.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?www.outlook\.com/
    ^https?://([A-Za-z0-9.-]*\.)?controls.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ajax.aspnetcdn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?prod.msocdn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?clientlog.portal.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?activation.sls.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?odc.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ols.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?office15client.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?officeclient.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ocsredir.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?r.office.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?officeredir.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?officepreviewredir.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ocws.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?officecdn.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Odc.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ocsa.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?insertmedia.bing.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?go.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?officecdn.microsoft.com.edgesuite\.net/
    ^https?://([A-Za-z0-9.-]*\.)?officecdn.microsoft.com.edgekey\.net/
    ^https?://([A-Za-z0-9.-]*\.)?cdn.onenote\.net/
    ^https?://([A-Za-z0-9.-]*\.)?www.onenote\.com/
    ^https?://([A-Za-z0-9.-]*\.)?officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?cdn.office\.net/
    ^https?://([A-Za-z0-9.-]*\.)?assets-yammer\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ajax.googleapis\.com/
    ^https?://([A-Za-z0-9.-]*\.)?cloudfront\.net/
    ^https?://([A-Za-z0-9.-]*\.)?yammer\.com/
    ^https?://([A-Za-z0-9.-]*\.)?yammerusercontent\.com/
    ^https?://([A-Za-z0-9.-]*\.)?outlook\.com/
    ^https?://([A-Za-z0-9.-]*\.)?hybridconfiguration.azurewebsites\.net/
    ^https?://([A-Za-z0-9.-]*\.)?outlook.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?mshrcstorageprod.blob.core.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?delve.office\.com/
    ^https?://([A-Za-z0-9.-]*\.)?domains.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?r1.res.office365\.com/
    ^https?://([A-Za-z0-9.-]*\.)?r3.res.office365\.com/
    ^https?://([A-Za-z0-9.-]*\.)?r4.res.office365\.com/
    ^https?://([A-Za-z0-9.-]*\.)?smtp.office365\.com/
    ^https?://([A-Za-z0-9.-]*\.)?adhybridhealth.azure\.com/
    ^https?://([A-Za-z0-9.-]*\.)?blob.core.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?microsoftonline-p\.com/
    ^https?://([A-Za-z0-9.-]*\.)?microsoftonline-p\.net/
    ^https?://([A-Za-z0-9.-]*\.)?msecnd\.net/
    ^https?://([A-Za-z0-9.-]*\.)?queue.core.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?servicebus.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?table.core.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?accountservices.Microsoftonline-m\.com/
    ^https?://([A-Za-z0-9.-]*\.)?accountservices.Microsoftonline-p\.net/
    ^https?://([A-Za-z0-9.-]*\.)?account.activedirectory.windowsazure\.com/
    ^https?://([A-Za-z0-9.-]*\.)?adminwebservice.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Api.login.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?clientconfig.microsoftonline-p\.net/
    ^https?://([A-Za-z0-9.-]*\.)?Consent.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?enterpriseregistration.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?hip.microsoftonline-p\.net/
    ^https?://([A-Za-z0-9.-]*\.)?Hipservice.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Idsignup.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Login.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Loginex.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?login.microsoftonline-p\.com/
    ^https?://([A-Za-z0-9.-]*\.)?login.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?management.azure\.com/
    ^https?://([A-Za-z0-9.-]*\.)?mscrl.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?msm.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?nexus.microsoftonline-p\.com/
    ^https?://([A-Za-z0-9.-]*\.)?policykeyservice.dc.ad.msft\.net/
    ^https?://([A-Za-z0-9.-]*\.)?provisioningapi.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?secure.aadcdn.microsoftonline-p\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Stamp2.login.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?sharepoint\.com/
    ^https?://([A-Za-z0-9.-]*\.)?sharepointonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?cdn.sharepointonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?click.email.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?login.microsoftonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Mobile.pipe.aria.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?nexus.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?Oneclient.sfx.ms\.com/
    ^https?://([A-Za-z0-9.-]*\.)?spoprod-a.akamaihd\.net/
    ^https?://([A-Za-z0-9.-]*\.)?static.sharepointonline\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ssw.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?storage.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?watson.telemetry.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wns.windows\.com/
    ^https?://([A-Za-z0-9.-]*\.)?testconnectivity.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?client.hip.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wu.client.hip.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?support.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-000.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-001.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-002.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-003.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-004.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-005.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-006.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-007.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-008.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-009.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-00a.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-00b.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-00c.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-00d.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-00e.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-000.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-001.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-002.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-003.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-004.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-005.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-006.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-007.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-008.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-009.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-00a.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-00b.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-00c.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-00d.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-00e.www.sway\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-www.sway-cdn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-www.sway-cdn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eus-www.sway-extensions\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wus-www.sway-extensions\.com/
    ^https?://([A-Za-z0-9.-]*\.)?c.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?c1.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?www.google-analytics\.com/
    ^https?://([A-Za-z0-9.-]*\.)?keydelivery.mediaservices.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?streaming.mediaservices.windows\.net/
    ^https?://([A-Za-z0-9.-]*\.)?r3.res.outlook\.com/
    ^https?://([A-Za-z0-9.-]*\.)?odcsm.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?my.sharepoint\.com/
    ^https?://([A-Za-z0-9.-]*\.)?ms.tific\.com/
    ^https?://([A-Za-z0-9.-]*\.)?roaming.officeapps.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?o15.officeredir.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?office.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?officeimg.vo.msecnd\.net/
    ^https?://([A-Za-z0-9.-]*\.)?m.webtrends\.com/
    ^https?://([A-Za-z0-9.-]*\.)?d.docs.live\.net/
    ^https?://([A-Za-z0-9.-]*\.)?login.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?auth.gfx.ms\.com/
    ^https?://([A-Za-z0-9.-]*\.)?wer.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?appex.bing\.com/
    ^https?://([A-Za-z0-9.-]*\.)?appex-rf.msn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?appexsin.stb.s-msn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?directory.services.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?docs.live\.net/
    ^https?://([A-Za-z0-9.-]*\.)?sqm.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?p100-sandbox.itunes.apple\.com/
    ^https?://([A-Za-z0-9.-]*\.)?signup.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?view.atdmt\.com/
    ^https?://([A-Za-z0-9.-]*\.)?dc2.client.hip.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?c.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?account.live\.com/
    ^https?://([A-Za-z0-9.-]*\.)?c.bing\.com/
    ^https?://([A-Za-z0-9.-]*\.)?partnerservices.getmicrosoftkey\.com/
    ^https?://([A-Za-z0-9.-]*\.)?cl2.apple\.com/
    ^https?://([A-Za-z0-9.-]*\.)?sas.office.microsoft\.com/
    ^https?://([A-Za-z0-9.-]*\.)?foodanddrink.services.appex.bing\.com/
    ^https?://([A-Za-z0-9.-]*\.)?en-US.appex-rf.msn\.com/
    ^https?://([A-Za-z0-9.-]*\.)?weather.tile.appex.bing\.com/
    ^https?://([A-Za-z0-9.-]*\.)?autodiscover-s.outlook\.com/
    ^https?://([A-Za-z0-9.-]*\.)?eildon.mail.onmicrosoft\.com/

  • Thanks for providing this list. I was having the same issues and this allowed me to move through installation phase.

  • This is fantastic - thanks for the share.

    It works exactly as you said it would.

    The bad...

    I entered all of them, copy pasting one line at a time into the "Web Filtering"/"Filtering Options"/"New Exception List".

    My hands hurt.  My eyeballs are aching.

    Someone tell me an easier way please :)

    Thanks!

  • Hi, Peter, and welcome to the UTM Community!

    Get ready to do a facepalm...

    Cheers - Bob

    .

    .

    .

    .

    .

    .

    .

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi,

     

    can you give me details on what exception settings you have set for these Office 365 URLs?

    Did you skip all the checks on the filtering options while setting up the exception list?

     

    Thanks,
    Klaus

     

Reply Children