This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Office Online Server with Exchange 2016 combination

Hi,

 

we got 4 Exchange 2016 Servers which load balanced through (Network Protection -> Server Load Balancing) not the WAF.

And we got 2 Office Online Server (OOS) / Office on the Web / Office Web Apps behind / protected through the WAF.

OOS is combined with our Sharepoint 2016 Server (also behind the WAF) and these works without any Problems.

Now we connected the OOS with out Exchange on organisation level and get an errormessage like "Excel/Word Web App cannot open this document for viewing due to an unknown error". Append a Session ID.

If i try to open a Document over email2016.domain.de/.../... we get these error
but if i open a Document over this https://ex01.domain.de/owa/... we don't get an error and all things work great.

I think this isn't a problem from Exchange / Sharepoint or Office Online.
Does anyone have also this problem?

Regards



This thread was automatically locked due to age.
Parents
  • Hi logan517,

    what shows the waf log? How did you configured the waf firewall profile?

    regards

    mod

     

  • for testing i disabled the firewall profile on the office online virtual webserver, but i get the sage error.

    This is the UTM WAF Log (i think i got all)

    2017:04:05-13:46:50 utmx-1 reverseproxy: id="0299" srcip="10.0.196.107" localip="10.0.189.127" size="0" user="-" host="10.0.196.107" method="POST" statuscode="200" reason="-" extra="-" exceptions="-" time="7705" url="/wv/RemoteUls.ashx" server="officeonline.domain.de" referer="officeonline.domain.de/.../wordviewerframe.aspx cookie="WACAirSpaceAnimationOff=off; ROUTEID.cd107d9706d71153bafd4ab15f1c6b5d=.node2; DcLcid=ui=1031&data=1031" set-cookie="-"
    2017:04:05-13:47:08 utmx-1 reverseproxy: gfZGwrDGl2a46NVLqD644qRVg6Cd5Yd9JXNLY=; DLHash_34f6e49dfa35700ca02c909042b5a1ec=3K1OBefTGkQh1sWBW45ZnStHLB086vkmzEYYk0FDV1g=" set-cookie="-"
    2017:04:05-13:47:25 utmx-1 reverseproxy: id="0299" srcip="10.0.196.107" localip="10.0.189.127" size="9438" user="-" host="10.0.196.107" method="POST" statuscode="200" reason="-" extra="-" exceptions="-" time="21061321" url="/wv/wordviewerframe.aspx" server="officeonline.domain.de" referer="-" cookie="WACAirSpaceAnimationOff=off; ROUTEID.cd107d9706d71153bafd4ab15f1c6b5d=.node2; DcLcid=ui=1031&data=1031" set-cookie="DcLcid=ui=1031&data=1031; path=/; secure; HttpOnly"
    2017:04:05-13:47:26 utmx-1 reverseproxy: id="0299" srcip="10.0.196.107" localip="10.0.189.127" size="0" user="-" host="10.0.196.107" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="5621" url="/wv/docdatahandler.ashx" server="officeonline.domain.de" referer="officeonline.domain.de/.../wordviewerframe.aspx cookie="WACAirSpaceAnimationOff=off; ROUTEID.cd107d9706d71153bafd4ab15f1c6b5d=.node2; DcLcid=ui=1031&data=1031" set-cookie="-"

     

    This is the ULS Log from office online server:

    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	Office Online common	ajba4	Medium	WAC Server HttpModule: Beginning request at target [/wv/wordviewerframe.aspx?ui=de-DE&rs=de-DE&WOPISrc=https%3A%2F%2Femail2016.DOMAIN.de%3A443%2Fowa%2F0158a90d-3b45-4345-b170-e13419097937%2540DOMAIN.de%2Fwopi%2Ffiles%2F%40%2Fowaatt%3Fowaatt%3DL1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%253d%253d&hh=1] in session [5e245bb2-108d-41d1-ba1e-331a0eeaf6d3] server build [16.0.7601.6800] client build [0.0.0.0]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	a3ig9	Medium	WAC boot-related beacons are disabled	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	MiniCheck	aubfb	Medium	UseMiniCheck return false: NoMiniCheckForSession=False, MiniCheckDataExist=False, MiniCheckConfigIsEnabled=False	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	axir6	Medium	StaticResourcesLoader: Flushing http page response	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	a22ei	Medium	CheckBaseDocumentInternal: {"UserLogString":"bhhvNnmLGYEsAuXiZE+9tT6IRJjM37gvwyZ2EMw5+rs=","RequiresVersion":true,"fUserCacheLookup":true,"BaseDocumentCache":false}	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	adhse	Medium	WOPI CheckFileInfo: Start [url:https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	ag7pm	Medium	URL generated for WOPI CheckFile Request: https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	afk6b	Medium	WOPI Proof Data: AccessToken Hash '1449929771' [1155 bytes], URL 'EMAIL2016.DOMAIN.de/.../OWAATT [1422 bytes], TimeStamp '636256018544964250' [8 bytes]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	ai85q	Medium	WOPI Proof: Using Current private key (to sign) that matches Current public key  BgIAAACkAABSU0ExAAgAAAEAAQDNvTBI6W08tDU+FkCI3V5Mo8H85U9IEaiWTksQHFi7g9KiX8MsoTLPG3DbKP2n+7OPYQY3ypYlWCwQkMvKZJOl9THs1D+A4nvOLVx5CzVIfdGqfRcUN9uWEj3vhIJp16hhfhaa8pdl4X4RX4Wnc4jjcGkIb0Uz0vLw33lBooNL2GI7Os7kM21+AtvwR0PlZes+NiR2zFYWWam29ULRa+oxfje9dNYuvJlgteCmGksJlO6SXcjh0RTddBH6kQGo85gk7qNS9ayOMiBBHqoih61Z1nZ77cSdqrMsWozkywIG04X0drb0fpGxLHrcRuzvcWzN5mHz1DZVsLuGcmR+KRjU	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	a0i2t	Medium	WOPI Proof - Successfully signed the data with the Current private key [7 ms]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	ai85q	Medium	WOPI Proof: Using Old private key (to sign) that matches Old public key  BgIAAACkAABSU0ExAAgAAAEAAQAjkUgUIc9RReVB8AawJHi/hE9hD9WVjw6zAggvQvlLHqDb643rjpwccV1NX7zBwaVP9de+NOec9vIwYWip4AvdKgpattxoHoo4iwyxJFlHZOifKJddWiv91SDlK7MKvsHBXin0ZXLueyTCRk5n9/Z/f5U1fFj8W3f+82ENohu5bFCd+f0TdrYFNgznpEWxDOzlwFEOQ08PXEnrPOXDkgH6qs37wXMFyOwqL0oq1KTmpGkWKNxdmL6tyDwa0MFUxNBKiliTZQKgtIpHstmrrs74qx7X+jYYQmwG06G350DA5QPoZwz8ubgaKDUU88tLDrjlcba45lN0xoO3zEf7ulqV	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	a0i2t	Medium	WOPI Proof - Successfully signed the data with the Old private key [6 ms]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	aoofx	Medium	HttpRequestAsync (Wopi,CheckFile,WACSERVER) Starting [mode: GET, url: https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	aoogg	Medium	HttpRequestAsync (Wopi,CheckFile,WACSERVER) End Called	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.52	w3wp.exe (0x2494)	0x3140	Office Online	WAC Hosting Interaction	aoogc	Unexpected	HttpRequestAsync, (Wopi,CheckFile,WACSERVER) no response [WebExceptionStatus:ConnectFailure, url:https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.52	w3wp.exe (0x2494)	0x3140	Office Online	WAC Hosting Interaction	aoogm	Medium	HttpRequestAsync (Wopi,CheckFile,WACSERVER) Setting Completion [Time in ms: 21014, Bytes Read: 0, StartTime: 03.20.2017 10:17:34.512, ClientIP: , Url: https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.52	w3wp.exe (0x2494)	0x3958	Office Online	Performance Reporting	ann56	Medium	Setting Completion: [Operation:Wopi.CheckFile] [CompletedSuccessfully:False] [RootOperation:] [StartTime:03/20/2017 10:17:34.512] [DurationInMilliseconds:21021] [SizeInBytes:0] [ExtraInfo:]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.52	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	a4nou	Monitorable	WopiStorage::LogWopiHostResponse: {"httpStatusCode":"Continue","requestUrl":"email2016.DOMAIN.de","logPrefix":"Wopi,CheckFile,WACSERVER"}	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	adhr0	Medium	Wopi,CheckFile,WACSERVER HttpRequestAsyncException [url:https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0, e:Microsoft.Office.Web.Common.HttpRequestAsyncException: No Response in WebException ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 10.0.189.116:443     at System.Net.Sockets.Socket.EndConnect(IAsyncResult asyncResult)     at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception)     --- End of inner exception stack trace ---     at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)     at Microsoft.Office.Web.Common.HttpRequestAsync.GetResponseCallback(IAsyncResult asyncResult)     --- End of inner exception stack trace ---]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	adhsk	Unexpected	WOPI CheckFile: Catch-All Failure [exception:Microsoft.Office.Web.Common.EnvironmentAdapters.UnexpectedErrorException: HttpRequest failed. Wopi,CheckFile,WACSERVER ---> Microsoft.Office.Web.Common.HttpRequestAsyncException: No Response in WebException ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 10.0.189.116:443     at System.Net.Sockets.Socket.EndConnect(IAsyncResult asyncResult)     at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception)     --- End of inner exception stack trace ---     at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)     at Microsoft.Office.Web.Common.HttpRequestAsync.GetResponseCallback(IAsyncResult asyncResult)     --- End of inner exception stack trace ---     --- End of inner exception stack trace ---     at Microsoft.Office.Web.Apps.Common.WopiDocument.LogAndThrowWireException(HttpRequestAsyncResult result, HttpRequestAsyncException delayedException)     at Microsoft.Office.Web.Common.HttpRequestAsync.End()     at Microsoft.Office.Web.Apps.Common.WopiDocument.CheckWopiFile()]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	ajjve	Medium	WOPI CheckFile: Catch-All Failure [url:https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	Performance Reporting	ann56	Medium	Setting Completion: [Operation:WacCheckFile] [CompletedSuccessfully:False] [RootOperation:] [StartTime:03/20/2017 10:17:34.496] [DurationInMilliseconds:21045] [SizeInBytes:0] [ExtraInfo:]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	avyqi	Medium	BaseDocument::LogSessionMetrics: {"ApplicationLCID":"de-DE","BrowserLCID":"de-DE","DataLCID":"de-DE","DocumentID":"https%3A%2F%2Femail2016%2EDOMAIN%2Ede%3A443%2Fowa%2F0158a90d%2D3b45%2D4345%2Db170%2De13419097937%2540DOMAIN%2Ede%2Fwopi%2Ffiles%2F%40%2Fowaatt%3Fowaatt%3DL1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%253d%253d"}	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	axvdb	Medium	CheckFailureCache.IncrementCheckFailureCount  Doc: https%3A%2F%2Femail2016%2EDOMAIN%2Ede%3A443%2Fowa%2F0158a90d%2D3b45%2D4345%2Db170%2De13419097937%2540DOMAIN%2Ede%2Fwopi%2Ffiles%2F%40%2Fowaatt%3Fowaatt%3DL1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%253d%253d User: bhhvNnmLGYEsAuXiZE+9tT6IRJjM37gvwyZ2EMw5+rs=	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	ai94t	Unexpected	FileUnknownException while loading the app. [FileSourceId: -1088102096] [ClusterId: 0] [ExtraErrorInfo: ]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.55	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Realtime Channel	aqv37	Medium	Using default Realtime Channel transport protocol 'auto'	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.55	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	bel4p	Monitorable	Unable to retrieve file name from.	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.55	w3wp.exe (0x2494)	0x3958	Office Online	Office Online common	af46w	Medium	WACServer HttpModule: Completed request with status code [200]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.94	w3wp.exe (0x2494)	0x35D8	Office Online	Office Online common	ajba4	Medium	WAC Server HttpModule: Beginning request at target [/wv/docdatahandler.ashx?&type=png&o15=1&ui=de-DE] in session [5e245bb2-108d-41d1-ba1e-331a0eeaf6d3] server build [16.0.7601.6800] client build [16.0.7601.6800]	6ab1259a-346d-4dd7-b213-512e02f108e8
    03.20.2017 11:17:55.94	w3wp.exe (0x2494)	0x35D8	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	6ab1259a-346d-4dd7-b213-512e02f108e8
    03.20.2017 11:17:55.94	w3wp.exe (0x2494)	0x35D8	Office Online	Office Online common	af46w	Medium	WACServer HttpModule: Completed request with status code [200]	6ab1259a-346d-4dd7-b213-512e02f108e8
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	Office Online	Office Online common	ajba4	Medium	WAC Server HttpModule: Beginning request at target [/wv/RemoteUls.ashx?build=16.0.7601.6800] in session [5e245bb2-108d-41d1-ba1e-331a0eeaf6d3] server build [16.0.7601.6800] client build [16.0.7601.6800]	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	Services Infrastructure	bUls Upload Listener	an53v	Medium	Processing bULS logs {"UploadId":0,"Count":7,"Size":2645}	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Services Infrastructure	AppSettings Processing	aubfa	Monitorable	[2017-03-20T10:17:55.909Z] Failed to get full appsettings service url	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Office Online Accessibility	bg09v	Medium	[2017-03-20T10:17:55.940Z] HighContrastDetector.ctor: IsInHighContrastMode=[false], HighContrastColors=[]	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Services Infrastructure	bUls Client Core	a0v2l	Medium	[2017-03-20T10:17:55.966Z] {"DocElemClientHeight":840,"DocElemClientWidth":1099,"DocElemOffsetHeight":0,"DocElemOffsetWidth":1099,"ScreenAvailHeight":1020,"ScreenAvailWidth":1680,"ScreenWidth":1680,"ScreenHeight":1050,"WinInnerHeight":840,"WinInnerWidth":1099,"WinOuterHeight":1020,"WinOuterWidth":1680,"WinDevicePixelRatio":1,"SupportsTouch":false,"NavAppName":"Netscape","NavAppVersion":"5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","NavLanguage":"de","NavUserAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","NavPlatform":"Win32","NavPlugins":[{"Name":"Shockwave Flash"},{"Name":"Widevine Content Decryption Module"},{"Name":"Native Client"},{"Name":"Chrome PDF Viewer"},{"Name":"Chrome PDF Viewer"}],"CalculatedDevicePixelRatio":1,"Error":""}	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Word Online Viewer	bi2yl	Medium	[2017-03-20T10:17:56.149Z] Request Complete. Result: ; Url: docdatahandler.ashx?&type=png&o15=1&ui=de-DE	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Browser Performance	ayhng	Medium	[2017-03-20T10:17:56.150Z] Legacy RenderTime (ms): 353	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Browser General	arxsh	Medium	[2017-03-20T10:17:56.179Z] {"Url":"officeonline.DOMAIN.de/.../wordviewerframe.aspx,"NavigationStart":"1490005054450","UnloadEventStart":"0","UnloadEventEnd":"0","RedirectStart":"0","RedirectEnd":"0","FetchStart":"1490005054450","DomainLookupStart":"1490005054450","DomainLookupEnd":"1490005054450","ConnectStart":"1490005054450","ConnectEnd":"1490005054450","SecureConnectionStart":"0","RequestStart":"1490005054468","ResponseStart":"1490005075744","ResponseEnd":"1490005075745","DomInteractive":"1490005075798","DomContentLoadedEventStart":"1490005075979","DomContentLoadedEventEnd":"1490005075980","DomComplete":"1490005076009","LoadEventStart":"1490005076009","LoadEventEnd":"1490005076009","Table":"PerformanceTiming"}	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Wac Ribbon	aw1e7	Medium	[2017-03-20T10:17:56.652Z] IOfficeTrialExperience object is ready	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	Office Online	Office Online common	af46w	Medium	WACServer HttpModule: Completed request with status code [200]	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:55.98	w3wp.exe (0x2494)	0x3308	Office Online	Office Online common	ajba4	Medium	WAC Server HttpModule: Beginning request at target [/wv/RemoteUls.ashx?build=16.0.7601.6800] in session [5e245bb2-108d-41d1-ba1e-331a0eeaf6d3] server build [16.0.7601.6800] client build [16.0.7601.6800]	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	w3wp.exe (0x2494)	0x3308	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	w3wp.exe (0x2494)	0x3308	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	w3wp.exe (0x2494)	0x3308	Services Infrastructure	bUls Upload Listener	an53v	Medium	Processing bULS logs {"UploadId":1,"Count":12,"Size":5533}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	bk00r	Medium	[2017-03-20T10:18:26.178Z] ResourceTimingLogger.Flush: Start executing command. Number of new entries to flash: 11	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../WordViewer.css,"InitiatorType":"link","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21300.93","DomainLookupStart":"21300.93","DomainLookupEnd":"21300.93","ConnectStart":"21300.93","ConnectEnd":"21300.93","SecureConnectionStart":"0","RequestStart":"21303.56","ResponseStart":"21304.335","ResponseEnd":"21308","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../MicrosoftAjax.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.015","DomainLookupStart":"21301.015","DomainLookupEnd":"21301.015","ConnectStart":"21301.015","ConnectEnd":"21301.015","SecureConnectionStart":"0","RequestStart":"21303.945","ResponseStart":"21305.645","ResponseEnd":"21311.36","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../CommonIntl.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.1","DomainLookupStart":"21301.1","DomainLookupEnd":"21301.1","ConnectStart":"21301.1","ConnectEnd":"21301.1","SecureConnectionStart":"0","RequestStart":"21305.18","ResponseStart":"21309.28","ResponseEnd":"21313.21","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../Compat.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.205","DomainLookupStart":"21301.205","DomainLookupEnd":"21301.205","ConnectStart":"21301.205","ConnectEnd":"21301.205","SecureConnectionStart":"0","RequestStart":"21306.8","ResponseStart":"21310.6","ResponseEnd":"21314.635","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../WordViewerIntl.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.275","DomainLookupStart":"21301.275","DomainLookupEnd":"21301.275","ConnectStart":"21301.275","ConnectEnd":"21301.275","SecureConnectionStart":"0","RequestStart":"21308.74","ResponseStart":"21312.24","ResponseEnd":"21316.175","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../WordViewer.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.34","DomainLookupStart":"21301.34","DomainLookupEnd":"21301.34","ConnectStart":"21301.34","ConnectEnd":"21301.34","SecureConnectionStart":"0","RequestStart":"21310.035","ResponseStart":"21312.64","ResponseEnd":"21339.83","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../docdatahandler.ashx,"InitiatorType":"xmlhttprequest","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21509.66","DomainLookupStart":"21509.66","DomainLookupEnd":"21509.66","ConnectStart":"21509.66","ConnectEnd":"21509.66","SecureConnectionStart":"0","RequestStart":"21511.865","ResponseStart":"21547.965","ResponseEnd":"21548.6","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../wacairspaceanimationlibrary.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21512.38","DomainLookupStart":"21512.38","DomainLookupEnd":"21512.38","ConnectStart":"21512.38","ConnectEnd":"21512.38","SecureConnectionStart":"0","RequestStart":"21514.085","ResponseStart":"21514.455","ResponseEnd":"21515.035","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.180Z] {"Url":"officeonline.DOMAIN.de/.../WordViewer.dll1.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21701.63","DomainLookupStart":"21701.63","DomainLookupEnd":"21701.63","ConnectStart":"21701.63","ConnectEnd":"21701.63","SecureConnectionStart":"0","RequestStart":"21703.295","ResponseStart":"21703.865","ResponseEnd":"21706.39","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.180Z] {"Url":"officeonline.DOMAIN.de/.../wv.png,"InitiatorType":"img","RedirectStart":"0","RedirectEnd":"0","FetchStart":"22212.845","DomainLookupStart":"22212.845","DomainLookupEnd":"22212.845","ConnectStart":"22212.845","ConnectEnd":"22212.845","SecureConnectionStart":"0","RequestStart":"22214.315","ResponseStart":"22214.8","ResponseEnd":"22216.02","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	bk00s	Medium	[2017-03-20T10:18:26.180Z] ResourceTimingLogger.Flush: Successfully ended. Number of new logged entries: 11	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	w3wp.exe (0x2494)	0x3308	Office Online	Office Online common	af46w	Medium	WACServer HttpModule: Completed request with status code [200]	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
Reply
  • for testing i disabled the firewall profile on the office online virtual webserver, but i get the sage error.

    This is the UTM WAF Log (i think i got all)

    2017:04:05-13:46:50 utmx-1 reverseproxy: id="0299" srcip="10.0.196.107" localip="10.0.189.127" size="0" user="-" host="10.0.196.107" method="POST" statuscode="200" reason="-" extra="-" exceptions="-" time="7705" url="/wv/RemoteUls.ashx" server="officeonline.domain.de" referer="officeonline.domain.de/.../wordviewerframe.aspx cookie="WACAirSpaceAnimationOff=off; ROUTEID.cd107d9706d71153bafd4ab15f1c6b5d=.node2; DcLcid=ui=1031&data=1031" set-cookie="-"
    2017:04:05-13:47:08 utmx-1 reverseproxy: gfZGwrDGl2a46NVLqD644qRVg6Cd5Yd9JXNLY=; DLHash_34f6e49dfa35700ca02c909042b5a1ec=3K1OBefTGkQh1sWBW45ZnStHLB086vkmzEYYk0FDV1g=" set-cookie="-"
    2017:04:05-13:47:25 utmx-1 reverseproxy: id="0299" srcip="10.0.196.107" localip="10.0.189.127" size="9438" user="-" host="10.0.196.107" method="POST" statuscode="200" reason="-" extra="-" exceptions="-" time="21061321" url="/wv/wordviewerframe.aspx" server="officeonline.domain.de" referer="-" cookie="WACAirSpaceAnimationOff=off; ROUTEID.cd107d9706d71153bafd4ab15f1c6b5d=.node2; DcLcid=ui=1031&data=1031" set-cookie="DcLcid=ui=1031&data=1031; path=/; secure; HttpOnly"
    2017:04:05-13:47:26 utmx-1 reverseproxy: id="0299" srcip="10.0.196.107" localip="10.0.189.127" size="0" user="-" host="10.0.196.107" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="5621" url="/wv/docdatahandler.ashx" server="officeonline.domain.de" referer="officeonline.domain.de/.../wordviewerframe.aspx cookie="WACAirSpaceAnimationOff=off; ROUTEID.cd107d9706d71153bafd4ab15f1c6b5d=.node2; DcLcid=ui=1031&data=1031" set-cookie="-"

     

    This is the ULS Log from office online server:

    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	Office Online common	ajba4	Medium	WAC Server HttpModule: Beginning request at target [/wv/wordviewerframe.aspx?ui=de-DE&rs=de-DE&WOPISrc=https%3A%2F%2Femail2016.DOMAIN.de%3A443%2Fowa%2F0158a90d-3b45-4345-b170-e13419097937%2540DOMAIN.de%2Fwopi%2Ffiles%2F%40%2Fowaatt%3Fowaatt%3DL1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%253d%253d&hh=1] in session [5e245bb2-108d-41d1-ba1e-331a0eeaf6d3] server build [16.0.7601.6800] client build [0.0.0.0]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	a3ig9	Medium	WAC boot-related beacons are disabled	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	MiniCheck	aubfb	Medium	UseMiniCheck return false: NoMiniCheckForSession=False, MiniCheckDataExist=False, MiniCheckConfigIsEnabled=False	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	axir6	Medium	StaticResourcesLoader: Flushing http page response	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	a22ei	Medium	CheckBaseDocumentInternal: {"UserLogString":"bhhvNnmLGYEsAuXiZE+9tT6IRJjM37gvwyZ2EMw5+rs=","RequiresVersion":true,"fUserCacheLookup":true,"BaseDocumentCache":false}	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	adhse	Medium	WOPI CheckFileInfo: Start [url:https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	ag7pm	Medium	URL generated for WOPI CheckFile Request: https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	afk6b	Medium	WOPI Proof Data: AccessToken Hash '1449929771' [1155 bytes], URL 'EMAIL2016.DOMAIN.de/.../OWAATT [1422 bytes], TimeStamp '636256018544964250' [8 bytes]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.49	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	ai85q	Medium	WOPI Proof: Using Current private key (to sign) that matches Current public key  BgIAAACkAABSU0ExAAgAAAEAAQDNvTBI6W08tDU+FkCI3V5Mo8H85U9IEaiWTksQHFi7g9KiX8MsoTLPG3DbKP2n+7OPYQY3ypYlWCwQkMvKZJOl9THs1D+A4nvOLVx5CzVIfdGqfRcUN9uWEj3vhIJp16hhfhaa8pdl4X4RX4Wnc4jjcGkIb0Uz0vLw33lBooNL2GI7Os7kM21+AtvwR0PlZes+NiR2zFYWWam29ULRa+oxfje9dNYuvJlgteCmGksJlO6SXcjh0RTddBH6kQGo85gk7qNS9ayOMiBBHqoih61Z1nZ77cSdqrMsWozkywIG04X0drb0fpGxLHrcRuzvcWzN5mHz1DZVsLuGcmR+KRjU	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	a0i2t	Medium	WOPI Proof - Successfully signed the data with the Current private key [7 ms]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	ai85q	Medium	WOPI Proof: Using Old private key (to sign) that matches Old public key  BgIAAACkAABSU0ExAAgAAAEAAQAjkUgUIc9RReVB8AawJHi/hE9hD9WVjw6zAggvQvlLHqDb643rjpwccV1NX7zBwaVP9de+NOec9vIwYWip4AvdKgpattxoHoo4iwyxJFlHZOifKJddWiv91SDlK7MKvsHBXin0ZXLueyTCRk5n9/Z/f5U1fFj8W3f+82ENohu5bFCd+f0TdrYFNgznpEWxDOzlwFEOQ08PXEnrPOXDkgH6qs37wXMFyOwqL0oq1KTmpGkWKNxdmL6tyDwa0MFUxNBKiliTZQKgtIpHstmrrs74qx7X+jYYQmwG06G350DA5QPoZwz8ubgaKDUU88tLDrjlcba45lN0xoO3zEf7ulqV	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	a0i2t	Medium	WOPI Proof - Successfully signed the data with the Old private key [6 ms]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	aoofx	Medium	HttpRequestAsync (Wopi,CheckFile,WACSERVER) Starting [mode: GET, url: https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:34.51	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	aoogg	Medium	HttpRequestAsync (Wopi,CheckFile,WACSERVER) End Called	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.52	w3wp.exe (0x2494)	0x3140	Office Online	WAC Hosting Interaction	aoogc	Unexpected	HttpRequestAsync, (Wopi,CheckFile,WACSERVER) no response [WebExceptionStatus:ConnectFailure, url:https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.52	w3wp.exe (0x2494)	0x3140	Office Online	WAC Hosting Interaction	aoogm	Medium	HttpRequestAsync (Wopi,CheckFile,WACSERVER) Setting Completion [Time in ms: 21014, Bytes Read: 0, StartTime: 03.20.2017 10:17:34.512, ClientIP: , Url: https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.52	w3wp.exe (0x2494)	0x3958	Office Online	Performance Reporting	ann56	Medium	Setting Completion: [Operation:Wopi.CheckFile] [CompletedSuccessfully:False] [RootOperation:] [StartTime:03/20/2017 10:17:34.512] [DurationInMilliseconds:21021] [SizeInBytes:0] [ExtraInfo:]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.52	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	a4nou	Monitorable	WopiStorage::LogWopiHostResponse: {"httpStatusCode":"Continue","requestUrl":"email2016.DOMAIN.de","logPrefix":"Wopi,CheckFile,WACSERVER"}	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	adhr0	Medium	Wopi,CheckFile,WACSERVER HttpRequestAsyncException [url:https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d&access_token=REDACTED_1187&access_token_ttl=0, e:Microsoft.Office.Web.Common.HttpRequestAsyncException: No Response in WebException ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 10.0.189.116:443     at System.Net.Sockets.Socket.EndConnect(IAsyncResult asyncResult)     at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception)     --- End of inner exception stack trace ---     at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)     at Microsoft.Office.Web.Common.HttpRequestAsync.GetResponseCallback(IAsyncResult asyncResult)     --- End of inner exception stack trace ---]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	adhsk	Unexpected	WOPI CheckFile: Catch-All Failure [exception:Microsoft.Office.Web.Common.EnvironmentAdapters.UnexpectedErrorException: HttpRequest failed. Wopi,CheckFile,WACSERVER ---> Microsoft.Office.Web.Common.HttpRequestAsyncException: No Response in WebException ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 10.0.189.116:443     at System.Net.Sockets.Socket.EndConnect(IAsyncResult asyncResult)     at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception)     --- End of inner exception stack trace ---     at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)     at Microsoft.Office.Web.Common.HttpRequestAsync.GetResponseCallback(IAsyncResult asyncResult)     --- End of inner exception stack trace ---     --- End of inner exception stack trace ---     at Microsoft.Office.Web.Apps.Common.WopiDocument.LogAndThrowWireException(HttpRequestAsyncResult result, HttpRequestAsyncException delayedException)     at Microsoft.Office.Web.Common.HttpRequestAsync.End()     at Microsoft.Office.Web.Apps.Common.WopiDocument.CheckWopiFile()]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	ajjve	Medium	WOPI CheckFile: Catch-All Failure [url:https://email2016.DOMAIN.de:443/owa/0158a90d-3b45-4345-b170-e13419097937%40DOMAIN.de/wopi/files/@/owaatt?owaatt=L1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%3d%3d]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	Performance Reporting	ann56	Medium	Setting Completion: [Operation:WacCheckFile] [CompletedSuccessfully:False] [RootOperation:] [StartTime:03/20/2017 10:17:34.496] [DurationInMilliseconds:21045] [SizeInBytes:0] [ExtraInfo:]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	avyqi	Medium	BaseDocument::LogSessionMetrics: {"ApplicationLCID":"de-DE","BrowserLCID":"de-DE","DataLCID":"de-DE","DocumentID":"https%3A%2F%2Femail2016%2EDOMAIN%2Ede%3A443%2Fowa%2F0158a90d%2D3b45%2D4345%2Db170%2De13419097937%2540DOMAIN%2Ede%2Fwopi%2Ffiles%2F%40%2Fowaatt%3Fowaatt%3DL1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%253d%253d"}	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Office Online	WAC Hosting Interaction	axvdb	Medium	CheckFailureCache.IncrementCheckFailureCount  Doc: https%3A%2F%2Femail2016%2EDOMAIN%2Ede%3A443%2Fowa%2F0158a90d%2D3b45%2D4345%2Db170%2De13419097937%2540DOMAIN%2Ede%2Fwopi%2Ffiles%2F%40%2Fowaatt%3Fowaatt%3DL1MtMS01LTIxLTE1MjY0NjY1Ni0yMDM1NzYyMjU2LTIxMTA3OTE1MDgtMTEyNjQwNO4xUnpv1AgBAQEAAA%253d%253d User: bhhvNnmLGYEsAuXiZE+9tT6IRJjM37gvwyZ2EMw5+rs=	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.54	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	ai94t	Unexpected	FileUnknownException while loading the app. [FileSourceId: -1088102096] [ClusterId: 0] [ExtraErrorInfo: ]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.55	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Realtime Channel	aqv37	Medium	Using default Realtime Channel transport protocol 'auto'	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.55	w3wp.exe (0x2494)	0x3958	Services Infrastructure	Services Infrastructure Logging	bel4p	Monitorable	Unable to retrieve file name from.	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.55	w3wp.exe (0x2494)	0x3958	Office Online	Office Online common	af46w	Medium	WACServer HttpModule: Completed request with status code [200]	5e245bb2-108d-41d1-ba1e-331a0eeaf6d3
    03.20.2017 11:17:55.94	w3wp.exe (0x2494)	0x35D8	Office Online	Office Online common	ajba4	Medium	WAC Server HttpModule: Beginning request at target [/wv/docdatahandler.ashx?&type=png&o15=1&ui=de-DE] in session [5e245bb2-108d-41d1-ba1e-331a0eeaf6d3] server build [16.0.7601.6800] client build [16.0.7601.6800]	6ab1259a-346d-4dd7-b213-512e02f108e8
    03.20.2017 11:17:55.94	w3wp.exe (0x2494)	0x35D8	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	6ab1259a-346d-4dd7-b213-512e02f108e8
    03.20.2017 11:17:55.94	w3wp.exe (0x2494)	0x35D8	Office Online	Office Online common	af46w	Medium	WACServer HttpModule: Completed request with status code [200]	6ab1259a-346d-4dd7-b213-512e02f108e8
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	Office Online	Office Online common	ajba4	Medium	WAC Server HttpModule: Beginning request at target [/wv/RemoteUls.ashx?build=16.0.7601.6800] in session [5e245bb2-108d-41d1-ba1e-331a0eeaf6d3] server build [16.0.7601.6800] client build [16.0.7601.6800]	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	Services Infrastructure	bUls Upload Listener	an53v	Medium	Processing bULS logs {"UploadId":0,"Count":7,"Size":2645}	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Services Infrastructure	AppSettings Processing	aubfa	Monitorable	[2017-03-20T10:17:55.909Z] Failed to get full appsettings service url	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Office Online Accessibility	bg09v	Medium	[2017-03-20T10:17:55.940Z] HighContrastDetector.ctor: IsInHighContrastMode=[false], HighContrastColors=[]	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Services Infrastructure	bUls Client Core	a0v2l	Medium	[2017-03-20T10:17:55.966Z] {"DocElemClientHeight":840,"DocElemClientWidth":1099,"DocElemOffsetHeight":0,"DocElemOffsetWidth":1099,"ScreenAvailHeight":1020,"ScreenAvailWidth":1680,"ScreenWidth":1680,"ScreenHeight":1050,"WinInnerHeight":840,"WinInnerWidth":1099,"WinOuterHeight":1020,"WinOuterWidth":1680,"WinDevicePixelRatio":1,"SupportsTouch":false,"NavAppName":"Netscape","NavAppVersion":"5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","NavLanguage":"de","NavUserAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","NavPlatform":"Win32","NavPlugins":[{"Name":"Shockwave Flash"},{"Name":"Widevine Content Decryption Module"},{"Name":"Native Client"},{"Name":"Chrome PDF Viewer"},{"Name":"Chrome PDF Viewer"}],"CalculatedDevicePixelRatio":1,"Error":""}	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Word Online Viewer	bi2yl	Medium	[2017-03-20T10:17:56.149Z] Request Complete. Result: ; Url: docdatahandler.ashx?&type=png&o15=1&ui=de-DE	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Browser Performance	ayhng	Medium	[2017-03-20T10:17:56.150Z] Legacy RenderTime (ms): 353	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Browser General	arxsh	Medium	[2017-03-20T10:17:56.179Z] {"Url":"officeonline.DOMAIN.de/.../wordviewerframe.aspx,"NavigationStart":"1490005054450","UnloadEventStart":"0","UnloadEventEnd":"0","RedirectStart":"0","RedirectEnd":"0","FetchStart":"1490005054450","DomainLookupStart":"1490005054450","DomainLookupEnd":"1490005054450","ConnectStart":"1490005054450","ConnectEnd":"1490005054450","SecureConnectionStart":"0","RequestStart":"1490005054468","ResponseStart":"1490005075744","ResponseEnd":"1490005075745","DomInteractive":"1490005075798","DomContentLoadedEventStart":"1490005075979","DomContentLoadedEventEnd":"1490005075980","DomComplete":"1490005076009","LoadEventStart":"1490005076009","LoadEventEnd":"1490005076009","Table":"PerformanceTiming"}	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	Browser @ w3wp.exe (0x2494)	0x35D8	Office Online	Wac Ribbon	aw1e7	Medium	[2017-03-20T10:17:56.652Z] IOfficeTrialExperience object is ready	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:25.96	w3wp.exe (0x2494)	0x35D8	Office Online	Office Online common	af46w	Medium	WACServer HttpModule: Completed request with status code [200]	0bb3784c-c5cc-4b9f-b075-ebabb5aab22c
    03.20.2017 11:18:55.98	w3wp.exe (0x2494)	0x3308	Office Online	Office Online common	ajba4	Medium	WAC Server HttpModule: Beginning request at target [/wv/RemoteUls.ashx?build=16.0.7601.6800] in session [5e245bb2-108d-41d1-ba1e-331a0eeaf6d3] server build [16.0.7601.6800] client build [16.0.7601.6800]	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	w3wp.exe (0x2494)	0x3308	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	w3wp.exe (0x2494)	0x3308	ULS Logging	Logging Correlation Data	xmnv	Medium	UserSessionId=5e245bb2-108d-41d1-ba1e-331a0eeaf6d3	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	w3wp.exe (0x2494)	0x3308	Services Infrastructure	bUls Upload Listener	an53v	Medium	Processing bULS logs {"UploadId":1,"Count":12,"Size":5533}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	bk00r	Medium	[2017-03-20T10:18:26.178Z] ResourceTimingLogger.Flush: Start executing command. Number of new entries to flash: 11	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../WordViewer.css,"InitiatorType":"link","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21300.93","DomainLookupStart":"21300.93","DomainLookupEnd":"21300.93","ConnectStart":"21300.93","ConnectEnd":"21300.93","SecureConnectionStart":"0","RequestStart":"21303.56","ResponseStart":"21304.335","ResponseEnd":"21308","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../MicrosoftAjax.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.015","DomainLookupStart":"21301.015","DomainLookupEnd":"21301.015","ConnectStart":"21301.015","ConnectEnd":"21301.015","SecureConnectionStart":"0","RequestStart":"21303.945","ResponseStart":"21305.645","ResponseEnd":"21311.36","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../CommonIntl.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.1","DomainLookupStart":"21301.1","DomainLookupEnd":"21301.1","ConnectStart":"21301.1","ConnectEnd":"21301.1","SecureConnectionStart":"0","RequestStart":"21305.18","ResponseStart":"21309.28","ResponseEnd":"21313.21","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../Compat.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.205","DomainLookupStart":"21301.205","DomainLookupEnd":"21301.205","ConnectStart":"21301.205","ConnectEnd":"21301.205","SecureConnectionStart":"0","RequestStart":"21306.8","ResponseStart":"21310.6","ResponseEnd":"21314.635","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../WordViewerIntl.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.275","DomainLookupStart":"21301.275","DomainLookupEnd":"21301.275","ConnectStart":"21301.275","ConnectEnd":"21301.275","SecureConnectionStart":"0","RequestStart":"21308.74","ResponseStart":"21312.24","ResponseEnd":"21316.175","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../WordViewer.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21301.34","DomainLookupStart":"21301.34","DomainLookupEnd":"21301.34","ConnectStart":"21301.34","ConnectEnd":"21301.34","SecureConnectionStart":"0","RequestStart":"21310.035","ResponseStart":"21312.64","ResponseEnd":"21339.83","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.98	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../docdatahandler.ashx,"InitiatorType":"xmlhttprequest","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21509.66","DomainLookupStart":"21509.66","DomainLookupEnd":"21509.66","ConnectStart":"21509.66","ConnectEnd":"21509.66","SecureConnectionStart":"0","RequestStart":"21511.865","ResponseStart":"21547.965","ResponseEnd":"21548.6","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.179Z] {"Url":"officeonline.DOMAIN.de/.../wacairspaceanimationlibrary.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21512.38","DomainLookupStart":"21512.38","DomainLookupEnd":"21512.38","ConnectStart":"21512.38","ConnectEnd":"21512.38","SecureConnectionStart":"0","RequestStart":"21514.085","ResponseStart":"21514.455","ResponseEnd":"21515.035","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.180Z] {"Url":"officeonline.DOMAIN.de/.../WordViewer.dll1.js,"InitiatorType":"script","RedirectStart":"0","RedirectEnd":"0","FetchStart":"21701.63","DomainLookupStart":"21701.63","DomainLookupEnd":"21701.63","ConnectStart":"21701.63","ConnectEnd":"21701.63","SecureConnectionStart":"0","RequestStart":"21703.295","ResponseStart":"21703.865","ResponseEnd":"21706.39","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	aq22u	Medium	[2017-03-20T10:18:26.180Z] {"Url":"officeonline.DOMAIN.de/.../wv.png,"InitiatorType":"img","RedirectStart":"0","RedirectEnd":"0","FetchStart":"22212.845","DomainLookupStart":"22212.845","DomainLookupEnd":"22212.845","ConnectStart":"22212.845","ConnectEnd":"22212.845","SecureConnectionStart":"0","RequestStart":"22214.315","ResponseStart":"22214.8","ResponseEnd":"22216.02","Table":"ResourceTiming"}	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	Browser @ w3wp.exe (0x2494)	0x3308	Office Online	Browser General	bk00s	Medium	[2017-03-20T10:18:26.180Z] ResourceTimingLogger.Flush: Successfully ended. Number of new logged entries: 11	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
    03.20.2017 11:18:55.99	w3wp.exe (0x2494)	0x3308	Office Online	Office Online common	af46w	Medium	WACServer HttpModule: Completed request with status code [200]	0121a1a8-5cd5-46b0-8e6b-4b4ea03b919b
Children
  • Hi logan,

    the logs shows no error. All seems OK.

    From your first Post:

    "but if i open a Document over this https://ex01.domain.de/owa/... we don't get an error and all things work great."

    That's what I can see in the Logs.

    "If i try to open a Document over email2016.domain.de/.../... we get these error"

    Have you created two virtual webservers, one for https and one for http? It looks like you have created just one virtual webserver for https requests.

    regards

    mod

     

  • I created one virtual Webserver

    Office Online
    Interface: (Additional Address on External IP) = 10.0.189.127
    Type: Encrypted (HTTPS) & redirect
    Certificate: officeonline
    Domain: officeonline.domain.de
    Real-Webservers: oos01 and oos02
    Firewall profile: ::No Profile:: (only for testing at the moment)
    [x] Pass host header

    Both Real-Servers are an Http / Port 80 because Office Online only allows SSLOffload (technet.microsoft.com/.../jj219455(v=office.16).aspx the Office Online Server farm)

    Our Sharepoint is similar configured in the WAF atm, expect the Real-Servers ;)

    Only our ExchangeServers are configured through Network Protection -> Server Load Balancing.
    2 Rules: (unobserved smtp / imap)
    Additional Address on External IP) -> Port 80 -> ex01...04
    Additional Address on External IP) -> Port 443 -> ex01...04

  • Hi,

    dosn't anyone has a solution?

    I've tried this one and get the same error:


    1. Installed a new OfficeOnline Server (current patchlevel) without ssloffload and trusted / not self signed certificate
    2. Connected this with our Exchange Server on organisation level
    3. Tried over email2016.domain.de -> error
    4. Tried over ex01.domain.de -> No error ;)

    So the problem is located to the "Server Load Balancing" method. The WAF isn't included in this scenario

    I've tried also to set the load balancing weight to one Server (100 / 0 / 0 / 0) but no result.

    Hmmm, strange problem

     

    edit:

    for testing, i created an additional address (10.0.189.100 / email2016test.domain.de) and 2 s-nat rules

    From Any - Service HTTP / HTTPS -> emailtest interface (address) (10.0.189.100)
    Source translation emailtest interface (address) (10.0.189.100)
    Destination translation: ex01.domain.de
    [X] Automatic Firewall rule
    [ ] Initial packets are logged

    the strange thing, i get the same error, so the problem isn't specific the server load balancing.........

     

    edit 2:

    I could limit the problem to the Servernames.

    https://email2016.domain.de/owa -> NOT working
    https://ex01.domain.de/owa -> Working ;)
    https://10.0.253.11/owa -> NOT working (ex01 A 10.0.253.11)

  • Have you opened a case with Sophos Support?  Have you posted a similar question on the Microsoft OOS bulletin board?

    It would help to see the WAF log that covers the time there was an error reported in the OOS log.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • The Problem is fixed.

    We got a regular routing problem.

    Declared and resolved in this post community.sophos.com/.../routing-problems-on-own-server-load-balncing-rule