+ Post New Thread
Results 1 to 15 of 15
Internet Related/Filtering/Firewall Thread, Bloxx & Office 365 / office 2013 in Technical; A shot in the dark, Does anyone have experience of Bloxx web filtering, I have a few issues with Office ...
  1. #1

    Join Date
    Feb 2014
    Location
    United Kingdom
    Posts
    5
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Bloxx & Office 365 / office 2013

    A shot in the dark, Does anyone have experience of Bloxx web filtering, I have a few issues with Office 365(office 2013) connecting even though the office URLs have been added to the all policies allowed list. Also seem to have the same issue with iTunes through our proxy.

    frustrating

  2. #2
    grant_girdwood's Avatar
    Join Date
    Jun 2012
    Location
    Bloxx HQ
    Posts
    54
    Thank Post
    2
    Thanked 11 Times in 10 Posts
    Rep Power
    6
    Hi RJK,

    I could be down to Microsoft responding to DNS queries using IPv6, if you raise a call with our support team they'll be able to sort this for you in no time

    cheers,
    Grant

  3. Thanks to grant_girdwood from:

    rjk1007 (27th February 2014)

  4. #3
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,201
    Thank Post
    212
    Thanked 222 Times in 191 Posts
    Rep Power
    72
    Am waiting for a Bloxx callback at the minute to do with something similar. I think I've found the answer but they need to edit the Squid settings for me. Found this info on the office365 support forum (very well hidden)

    Code:
    outlook.office365.com domain resolves to a set of 25 IP addresses, most of which will reject connections depending on the part of the planet you are in. Squid by default tries the first 10 connection paths (ie the first 10 of those 12 IPv6 addresses) before giving up.
    
    You can avoid this failure by setting "forward_max_tries 25".

  5. Thanks to themightymrp from:

    rjk1007 (27th February 2014)

  6. #4
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,201
    Thank Post
    212
    Thanked 222 Times in 191 Posts
    Rep Power
    72
    PS - make sure you have the tick enabled to bypass proxy for local addresses, this needed to be on for me to make Outlook 2013 connect

  7. #5

    Join Date
    Feb 2014
    Location
    United Kingdom
    Posts
    5
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks for the response, Tried calling support team but they weren't willing to speak to me as we haven't renew'd our support contract. :-( so i guess I'll have to wait for forum help or just simply rip the device out.

  8. #6
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,201
    Thank Post
    212
    Thanked 222 Times in 191 Posts
    Rep Power
    72
    OK, Bloxx support used a remote desktop session to my PC and accessed Bloxx via Putty. The guy disabled IPv6 on the unit and we rebooted. All issues now resolved!

    If you are no longer paying support contract, ask them for the root password for the unit. Then you can make this change yourself. The command lines are below

    Code:
    nano -w /etc/default/grub
    Find the line GRUB_CMDLINE_LINUX = ""

    Change it to GRUB_CMDLINE_LINUX = "ipv6.disable=1"

    Save the changes, then run

    Code:
    update-grub
    Reboot the device using the web interface.

  9. Thanks to themightymrp from:

    rjk1007 (27th February 2014)

  10. #7

    Join Date
    Feb 2014
    Location
    United Kingdom
    Posts
    5
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Cheers I'll give it a whirl...

  11. #8

    Join Date
    Feb 2014
    Location
    United Kingdom
    Posts
    5
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Just out of interest, I dont suppose anyone knows the ROOT password for the Bloxx. Just putting it out there....

  12. #9

    Join Date
    Sep 2012
    Location
    UK
    Posts
    25
    Thank Post
    4
    Thanked 2 Times in 2 Posts
    Rep Power
    4
    The list of hosts that you have to allow through BLOXX includes a few sites not mentioned in Apple's support pages. I don't have the list to hand, but BLOXX support will be able to help you.

  13. #10
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,201
    Thank Post
    212
    Thanked 222 Times in 191 Posts
    Rep Power
    72
    Apple? The opening post is about Office 365 - Microsoft

  14. #11
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,201
    Thank Post
    212
    Thanked 222 Times in 191 Posts
    Rep Power
    72
    Forget that, my bad - missed the iTunes bit

  15. #12
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,201
    Thank Post
    212
    Thanked 222 Times in 191 Posts
    Rep Power
    72
    I followed this from the Bloxx support page last week and now our iTunes works spot on:

    The Apple iTunes Store does not function when requests are challenged to authenticate and/or are decrypted by SSL Intercept. This can be quickly resolved by running through the following steps:



    •Once logged in to the UI select Users & Groups > Identification > Settings*
    •Bypass authentication for the following;
    •.apple.com
    •.edgesuite.com
    •.itunes.com
    •.mzstatic.com
    •.verisign.com
    •.cddbp.net
    •Once the above settings have been saved you will need to then ensure they are allowed on your default groups filtering policies, the easiest way to achieve this if are not sure which policy is assigned to your default group is to allow these domains on all policies via your URL Wizard.
    •Next you will need to disable SSL Intercept from decrypting the request, select Filtering and then the SSL Intercept** option
    •Scroll to the Tunnel rules (bypass HTTPS filtering) area
    •Add the following domains;
    •apple.com

    •mzstatic.com

    •If you are in transparent mode, you will also need to Add certificates from the following domains to the tunnel list:•gs-loc.apple.com
    •itunes.apple.com
    •s.mzstatic.com
    •xp.apple.com
    •p47-buy.itunes.apple.com
    EDIT - note leading period (dot) before the names of domains in the first list section - you need to include these!
    Last edited by themightymrp; 17th March 2014 at 09:23 AM.

  16. #13
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,655
    Thank Post
    164
    Thanked 218 Times in 201 Posts
    Rep Power
    67
    We had exactly this problem, looks like you've found most of the solutions already as ours needed:

    1) IPv6 disabled
    2) bypass authentication for Office 365 domains (similar to the iTunes above)
    3) staff added to software download category (as some of the 365 stuff comes down via the Akamai CDN)

    There's also a bug in Outlook 2013 (may or may not be fixed in SP1) where AutoDiscover will fail when setting up a profile. That's due to Outlook still trying to go out directly despite the PC having a proxy configured in Internet Options. The only workaround is to use Auto Detect with a WPAD \ PAC file and explicitly state the Office 365 domains to use the proxy server.

    Enjoy!

  17. #14
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,201
    Thank Post
    212
    Thanked 222 Times in 191 Posts
    Rep Power
    72
    We had that but just ticked the box in IE proxy settings for bypass proxy for local addresses. Seemed to sort it

  18. #15
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,655
    Thank Post
    164
    Thanked 218 Times in 201 Posts
    Rep Power
    67
    I think it also depends on your internal DNS domain name as well, ours is what Microsoft call split horizon and 365 doesn't like it very much

SHARE:
+ Post New Thread

Similar Threads

  1. Office 365 & Exchange 2013
    By mikkydoos in forum Cloud Services
    Replies: 0
    Last Post: 30th January 2014, 10:08 AM
  2. Replies: 4
    Last Post: 28th November 2013, 09:01 AM
  3. Office 365 + Office 2003 + xlsl = fail
    By gerardsweeney in forum Cloud Services
    Replies: 2
    Last Post: 25th November 2013, 10:01 AM
  4. 365 vs 2013 vs Hotmail Office
    By Steve21 in forum Office Software
    Replies: 1
    Last Post: 3rd November 2012, 01:21 PM
  5. Office 365 and 2013 spoint
    By pmdc199 in forum Cloud Services
    Replies: 6
    Last Post: 12th September 2012, 08:33 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •