Office 2016/365 Install Failing with error 30174-4 (1392) - Possible Range Requests Issue

Question

Hello, 
 
 I am getting error 30174-4 (1392) when trying to install Office 2016 using the online installer from our Office 365 portal. 
 I have tried disabling country blocking, adding an Any type rule for one of the clients, etc but I am still seeing the error. 
 I have added the network ranges suggested by Microsoft in this article . 
 A Spice Works post points to it perhaps being a range request issue and that "Allowing range requests through unmodified" may fix the issue? 
 Are range request changes supported in Sophos UTM 9.4? 
 Also if anyone had encountered a similar issue before. 
 Thanks, Mark.

Michael Dunn · Accepted Answer

Range request are probably the issue. Because AV cannot scan the middle of a file (which is really what a range request is) it is blocked. The only way around it is to skip AV scanning. You can do this if you know the destinations and create an exception to skip AV. Putting them in the Skiplist will also work, that is a "bigger hammer". :)

sys8dmin · Answer

Hi Trent, 
 I agree that there must be an easier way. In the end I had to manually input a lot of IP addresses from the MS Office 365 support article and create firewall rules to allow these blocks of IP address to communicate with the exchange box and for the internal network to communicate back. 
 https://support.office.com/en-gb/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-GB&ad=GB 
 Hope this helps here is an export of the URL filtering I am using for MS Office 365/Azure under web protection: 
 ^https?://([A-Za-z0-9.-]*\.)?azurerms\.com/ ^https?://([A-Za-z0-9.-]*\.)?cloudapp\.net/ ^https?://([A-Za-z0-9.-]*\.)?entrust\.net/ ^https?://([A-Za-z0-9.-]*\.)?geotrust\.com/ ^https?://([A-Za-z0-9.-]*\.)?glbdns.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?live\.com/ ^https?://([A-Za-z0-9.-]*\.)?microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?msedge\.net/ ^https?://([A-Za-z0-9.-]*\.)?msocdn\.com/ ^https?://([A-Za-z0-9.-]*\.)?office\.com/ ^https?://([A-Za-z0-9.-]*\.)?office\.net/ ^https?://([A-Za-z0-9.-]*\.)?office365\.com/ ^https?://([A-Za-z0-9.-]*\.)?omniroot\.com/ ^https?://([A-Za-z0-9.-]*\.)?onmicrosoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?Portal.cloudappsecurity\.com/ ^https?://([A-Za-z0-9.-]*\.)?public-trust\.com/ ^https?://([A-Za-z0-9.-]*\.)?symcb\.com/ ^https?://([A-Za-z0-9.-]*\.)?symcd\.com/ ^https?://([A-Za-z0-9.-]*\.)?verisign\.com/ ^https?://([A-Za-z0-9.-]*\.)?verisign\.net/ ^https?://([A-Za-z0-9.-]*\.)?agent.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?appsforoffice.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?Clientlog.portal.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?crl.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?dc.services.visualstudio\.com/ ^https?://([A-Za-z0-9.-]*\.)?evsecure-aia.verisign\.com/ ^https?://([A-Za-z0-9.-]*\.)?evsecure-crl.verisign\.com/ ^https?://([A-Za-z0-9.-]*\.)?evsecure-ocsp.verisign\.com/ ^https?://([A-Za-z0-9.-]*\.)?equivio.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?equivioprod*.cloudapp\.net/ ^https?://([A-Za-z0-9.-]*\.)?Home.Office\.com/ ^https?://([A-Za-z0-9.-]*\.)?liverdcxstorage.blob.core.windowsazure\.com/ ^https?://([A-Za-z0-9.-]*\.)?Nexus.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?ocsp.msocsp\.com/ ^https?://([A-Za-z0-9.-]*\.)?office365servicehealthcommunications.cloudapp\.net/ ^https?://([A-Za-z0-9.-]*\.)?office365zoom.cloudapp\.net/ ^https?://([A-Za-z0-9.-]*\.)?outlook.office365\.com/ ^https?://([A-Za-z0-9.-]*\.)?Portal.Office\.com/ ^https?://([A-Za-z0-9.-]*\.)?Prod.msocdn\.com/ ^https?://([A-Za-z0-9.-]*\.)?products.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?protection.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?sa.symcb\.com/ ^https?://([A-Za-z0-9.-]*\.)?sd.symcb\.com/ ^https?://([A-Za-z0-9.-]*\.)?support.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?technet.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?telemetry.remoteapp.windowsazure\.com/ ^https?://([A-Za-z0-9.-]*\.)?vortex.data.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?www.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?www.remoteapp.windowsazure\.com/ ^https?://([A-Za-z0-9.-]*\.)?zoom-cs-prod*.cloudapp\.net/ ^https?://([A-Za-z0-9.-]*\.)?broadcast.skype\.com/ ^https?://([A-Za-z0-9.-]*\.)?Lync\.com/ ^https?://([A-Za-z0-9.-]*\.)?infra.lync\.com/ ^https?://([A-Za-z0-9.-]*\.)?microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?aka.ms\.com/ ^https?://([A-Za-z0-9.-]*\.)?api.skype\.com/ ^https?://([A-Za-z0-9.-]*\.)?Graph.skype\.com/ ^https?://([A-Za-z0-9.-]*\.)?pipe.skype\.com/ ^https?://([A-Za-z0-9.-]*\.)?users.storage.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?quicktips.skypeforbusiness\.com/ ^https?://([A-Za-z0-9.-]*\.)?skypemaprdsitus.trafficmanager\.net/ ^https?://([A-Za-z0-9.-]*\.)?tasks.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?cus-000.tasks.osi.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?ea-000.tasks.osi.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?eus-zzz.tasks.osi.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?neu-000.tasks.osi.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?sea-000.tasks.osi.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?weu-000.tasks.osi.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?wus-000.tasks.osi.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?www.outlook\.com/ ^https?://([A-Za-z0-9.-]*\.)?controls.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?ajax.aspnetcdn\.com/ ^https?://([A-Za-z0-9.-]*\.)?prod.msocdn\.com/ ^https?://([A-Za-z0-9.-]*\.)?clientlog.portal.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?activation.sls.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?odc.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?ols.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?office15client.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?officeclient.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?ocsredir.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?r.office.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?officeredir.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?officepreviewredir.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?ocws.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?officecdn.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?Odc.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?ocsa.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?insertmedia.bing.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?go.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?officecdn.microsoft.com.edgesuite\.net/ ^https?://([A-Za-z0-9.-]*\.)?officecdn.microsoft.com.edgekey\.net/ ^https?://([A-Za-z0-9.-]*\.)?cdn.onenote\.net/ ^https?://([A-Za-z0-9.-]*\.)?www.onenote\.com/ ^https?://([A-Za-z0-9.-]*\.)?officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?cdn.office\.net/ ^https?://([A-Za-z0-9.-]*\.)?assets-yammer\.com/ ^https?://([A-Za-z0-9.-]*\.)?ajax.googleapis\.com/ ^https?://([A-Za-z0-9.-]*\.)?cloudfront\.net/ ^https?://([A-Za-z0-9.-]*\.)?yammer\.com/ ^https?://([A-Za-z0-9.-]*\.)?yammerusercontent\.com/ ^https?://([A-Za-z0-9.-]*\.)?outlook\.com/ ^https?://([A-Za-z0-9.-]*\.)?hybridconfiguration.azurewebsites\.net/ ^https?://([A-Za-z0-9.-]*\.)?outlook.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?mshrcstorageprod.blob.core.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?delve.office\.com/ ^https?://([A-Za-z0-9.-]*\.)?domains.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?r1.res.office365\.com/ ^https?://([A-Za-z0-9.-]*\.)?r3.res.office365\.com/ ^https?://([A-Za-z0-9.-]*\.)?r4.res.office365\.com/ ^https?://([A-Za-z0-9.-]*\.)?smtp.office365\.com/ ^https?://([A-Za-z0-9.-]*\.)?adhybridhealth.azure\.com/ ^https?://([A-Za-z0-9.-]*\.)?blob.core.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?microsoftonline-p\.com/ ^https?://([A-Za-z0-9.-]*\.)?microsoftonline-p\.net/ ^https?://([A-Za-z0-9.-]*\.)?msecnd\.net/ ^https?://([A-Za-z0-9.-]*\.)?queue.core.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?servicebus.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?table.core.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?accountservices.Microsoftonline-m\.com/ ^https?://([A-Za-z0-9.-]*\.)?accountservices.Microsoftonline-p\.net/ ^https?://([A-Za-z0-9.-]*\.)?account.activedirectory.windowsazure\.com/ ^https?://([A-Za-z0-9.-]*\.)?adminwebservice.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?Api.login.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?clientconfig.microsoftonline-p\.net/ ^https?://([A-Za-z0-9.-]*\.)?Consent.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?enterpriseregistration.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?hip.microsoftonline-p\.net/ ^https?://([A-Za-z0-9.-]*\.)?Hipservice.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?Idsignup.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?Login.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?Loginex.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?login.microsoftonline-p\.com/ ^https?://([A-Za-z0-9.-]*\.)?login.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?management.azure\.com/ ^https?://([A-Za-z0-9.-]*\.)?mscrl.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?msm.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?nexus.microsoftonline-p\.com/ ^https?://([A-Za-z0-9.-]*\.)?policykeyservice.dc.ad.msft\.net/ ^https?://([A-Za-z0-9.-]*\.)?provisioningapi.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?secure.aadcdn.microsoftonline-p\.com/ ^https?://([A-Za-z0-9.-]*\.)?Stamp2.login.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?sharepoint\.com/ ^https?://([A-Za-z0-9.-]*\.)?sharepointonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?cdn.sharepointonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?click.email.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?login.microsoftonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?Mobile.pipe.aria.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?nexus.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?Oneclient.sfx.ms\.com/ ^https?://([A-Za-z0-9.-]*\.)?spoprod-a.akamaihd\.net/ ^https?://([A-Za-z0-9.-]*\.)?static.sharepointonline\.com/ ^https?://([A-Za-z0-9.-]*\.)?ssw.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?storage.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?watson.telemetry.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?wns.windows\.com/ ^https?://([A-Za-z0-9.-]*\.)?testconnectivity.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?client.hip.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?wu.client.hip.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?support.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-000.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-001.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-002.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-003.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-004.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-005.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-006.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-007.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-008.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-009.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-00a.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-00b.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-00c.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-00d.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-00e.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-000.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-001.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-002.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-003.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-004.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-005.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-006.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-007.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-008.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-009.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-00a.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-00b.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-00c.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-00d.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-00e.www.sway\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-www.sway-cdn\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-www.sway-cdn\.com/ ^https?://([A-Za-z0-9.-]*\.)?eus-www.sway-extensions\.com/ ^https?://([A-Za-z0-9.-]*\.)?wus-www.sway-extensions\.com/ ^https?://([A-Za-z0-9.-]*\.)?c.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?c1.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?www.google-analytics\.com/ ^https?://([A-Za-z0-9.-]*\.)?keydelivery.mediaservices.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?streaming.mediaservices.windows\.net/ ^https?://([A-Za-z0-9.-]*\.)?r3.res.outlook\.com/ ^https?://([A-Za-z0-9.-]*\.)?odcsm.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?my.sharepoint\.com/ ^https?://([A-Za-z0-9.-]*\.)?ms.tific\.com/ ^https?://([A-Za-z0-9.-]*\.)?roaming.officeapps.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?o15.officeredir.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?office.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?officeimg.vo.msecnd\.net/ ^https?://([A-Za-z0-9.-]*\.)?m.webtrends\.com/ ^https?://([A-Za-z0-9.-]*\.)?d.docs.live\.net/ ^https?://([A-Za-z0-9.-]*\.)?login.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?auth.gfx.ms\.com/ ^https?://([A-Za-z0-9.-]*\.)?wer.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?appex.bing\.com/ ^https?://([A-Za-z0-9.-]*\.)?appex-rf.msn\.com/ ^https?://([A-Za-z0-9.-]*\.)?appexsin.stb.s-msn\.com/ ^https?://([A-Za-z0-9.-]*\.)?directory.services.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?docs.live\.net/ ^https?://([A-Za-z0-9.-]*\.)?sqm.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?p100-sandbox.itunes.apple\.com/ ^https?://([A-Za-z0-9.-]*\.)?signup.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?view.atdmt\.com/ ^https?://([A-Za-z0-9.-]*\.)?dc2.client.hip.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?c.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?account.live\.com/ ^https?://([A-Za-z0-9.-]*\.)?c.bing\.com/ ^https?://([A-Za-z0-9.-]*\.)?partnerservices.getmicrosoftkey\.com/ ^https?://([A-Za-z0-9.-]*\.)?cl2.apple\.com/ ^https?://([A-Za-z0-9.-]*\.)?sas.office.microsoft\.com/ ^https?://([A-Za-z0-9.-]*\.)?foodanddrink.services.appex.bing\.com/ ^https?://([A-Za-z0-9.-]*\.)?en-US.appex-rf.msn\.com/ ^https?://([A-Za-z0-9.-]*\.)?weather.tile.appex.bing\.com/ ^https?://([A-Za-z0-9.-]*\.)?autodiscover-s.outlook\.com/ ^https?://([A-Za-z0-9.-]*\.)?eildon.mail.onmicrosoft\.com/

BAlfson · Answer

Hi, Peter, and welcome to the UTM Community! 
 Get ready to do a facepalm... 
 Cheers - Bob 
 . 
 . 
 . 
 . 
 . 
 . 
 .

sachingurung · Answer

Hi Mark, 
 In the UTM, monitor packetfilter.log and check what influences the drop. If you are using UTM in transparent mode, Navigate through Web Protection>Filtering option>Misc>Skip transparent mode skip list and add the FQDN(s) in the skip transparent mode destination. 
 Thanks