We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Gateway

Office 365 issues failing to install/update/activate via web filter.

  • Type: Knowledgebase
  • Date changed: one year ago
Solution #00006851 

Scope:

Issues with MS Office 365 in its entirety for possible install/activation/ or Update concerns.

Answer:

This is a list that may become outdated per Microsoft and can be verified at their sites for Office 365 concerns via proxy. Many forums show little help and frustration with MS corp. This may be valid as of this writing date only!

If you are only looking to fix a single issue for a customer for say MS Lync, you may view the MS site and determine the MS Lync issue to be resolved by adding certain domains required specific to Lync. Once added, you can either add more if unresolved, IP exempt ranges needed, or tcpdump to find a site or IP still not passing properly to resolve the issue.

See urls below for updated info to office365 per Microsoft

https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2
more articles viewed on this subject as a MS concern with proxy issues.

https://technet.microsoft.com/en-us/library/jj200580(EXCHG.150).aspx

http://technet.microsoft.com/en-us/library/hh373144.aspx

http://jesperstahle.azurewebsites.net/?p=972

http://blogs.technet.com/b/neiljohn/archive/2012/01/26/office-365-proxy-server-exclusion-list-office-365-service-url-s.aspx?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+NeilJohnson-ARocknRollNerd+(Neil+Johnson+-+a+rock+%27n+roll+nerd...)

With a direct proxy, the browser / Pac file / WCCP / or WSA may need any exemption added for testing

For any proxy page exemption used I have all these edited already for use with:

The Proxy Authentication Domain exemption list
This list may be outdated and need additional entries added as seeing examples below or by adding them in one at a time from the GUI page fields!

Regular Expression,Enabled/Disabled 

^(.*\.)?outlook\.office365\.com:443,Yes 

^http://([^:/]*\.)?crl\.microsoft\.com/.*$,Yes 

^http://([^:/]*\.)?mscrl\.microsoft\.com/.*$,Yes 

^(.*\.)?ims-na1\.adobelogin\.com:443,Yes 

^(.*\.)?adobeid-na1\.services\.adobe\.com:443,Yes 

^(.*\.)?api2\.acrobat\.com:443,Yes 

^http://([^:/]*\.)?api2\.acrobat\.com/.*$,Yes 

^http://([^:/]*\.)?go\.microsoft\.com/.*$,Yes 

^(.*\.)?sls\.microsoft\.com:443,Yes 

^http://([^:/]*\.)?sls\.microsoft\.com/.*$,Yes 

^http://([^:/]*\.)?www\.microsoft\.com/.*$,Yes 

^(.*\.)?activation\.sls\.microsoft\.com:443,Yes 

^(.*\.)?irfuhc01\.irfu\.ie:443,Yes 

^(.*\.)?irfuex01\.irfu\.ie:443,Yes 

^http://([^:/]*\.)?crl\.microsoft\.com\.pki\.crl\.products\.MicrosoftProductSecureCommunicationsPCA\.crl/.*$,Yes 

^http://([^:/]*\.)?www\.microsoft\.com\.pki\.crl\.products\.MicrosoftProductSecureCommunicationsPCA\.crl/.*$,Yes 

^http://([^:/]*\.)?officecdn\.microsoft\.com/.*$,Yes 

^(.*\.)?c2rsetup\.officeapps\.live\.com:443,Yes 

^(.*\.)?nexus\.officeapps\.live\.com:443,Yes 

^(.*\.)?portal\.microsoftonline\.com:443,Yes 

^http://([^:/]*\.)office15client\.microsoft\.com/.*$,Yes 

^http://([^:/]*\.)officeing\.vo\.msecmd\.net/.*$,Yes 

officeimg\.vo\.msecnd\.net,Yes 

office\.microsoft\.com,Yes 

odc\.officeapps\.live\.com,Yes 

t\.urs\.microsoft\.com,Yes 

^(.*\.)?apple\.com:443,Yes 

^http://([^:/]*\.)?apple\.com/.*$,Yes 

^(.*\.)?verisign\.com:443,Yes 

^(.*\.)?mzstatic\.com:443,Yes 

^http://([^:/]*\.)?mzstatic\.com/.*$,Yes 

^http://([^:/]*\.)?msftncsi\.com/.*$,Yes 

^(.*\.)?msftncsi\.com:443,Yes 

^http://([^:/]*\.)?windowsupdate\.com/.*$,Yes 

^(.*\.)?windowsupdate\.com:443,Yes 

^http://([^:/]*\.)?microsoft\.com/.*$,Yes 

^(.*\.)?microsoft\.com:443,Yes 

^http://([^:/]*\.)?microsoftonline\.com/.*$,Yes 

^(.*\.)?microsoftonline\.com:443,Yes 

^http://([^:/]*\.)?officeapps\.com/.*$,Yes 

^(.*\.)?officeapps\.com:443,Yes 

^https://([^:/]*\.)activation.sls.microsoft.com.*$,Yes 

^http://([^:/]*\.)crl.microsoft.com/pki/crl/products/MicrosoftProductSecureServer.crl.*$,Yes 

^http://([^:/]*\.)crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl.*$,Yes 

^http://([^:/]*\.)crl.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl.*$,Yes 

^http://([^:/]*\.)www.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl.*$,Yes

^https://([^:/]*\.)odc.officeapps.live.com.*$,Yes 

^https://([^:/]*\.)ols.officeapps.live.com/olsc.*$,Yes 

^http://([^:/]*\.)officecdn.microsoft.com.*$,Yes 

^http://([^:/]*\.)go.microsoft.com.*$,Yes 

^http://([^:/]*\.)office15client.microsoft.com.*$,Yes 

^http://([^:/]*\.)sls.microsoft.com.*$,Yes 

^(.*\.)?login\.microsoftonline\.com:443,Yes 

^http://([^:/]*\.)?verisign\.com/.*$,Yes 

^http://([^:/]*\.)?cloudapp\.net/.*$,Yes 

^(.*\.)?cloudapp\.net:443,Yes 

^http://([^:/]*\.)?nexus\.officeapps\.live\.com/.*$,Yes 

^http://([^:/]*\.)?live\.com/.*$,Yes 

^(.*\.)?live\.com:443,Yes 

^http://([^:/]*\.)?lync\.com/.*$,Yes 

^(.*\.)?lync\.com:443,Yes 

^http://([^:/]*\.)?glbdns\.microsoft\.com/.*$,Yes 

^(.*\.)?glbdns\.microsoft\.com:443,Yes 

^http://([^:/]*\.)?activedirectory\.windowsazure\.com/.*$,Yes 

^(.*\.)?activedirectory\.windowsazure\.com:443,Yes 

^http://([^:/]*\.)?aadrm\.com/.*$,Yes 

^(.*\.)?aadrm\.com:443,Yes 

^http://([^:/]*\.)?microsoftonline-p\.com/.*$,Yes 

^(.*\.)?microsoftonline-p\.com:443,Yes 

^http://([^:/]*\.)?microsoftonline-p\.net/.*$,Yes 

^(.*\.)?microsoftonline-p\.net:443,Yes 

^http://([^:/]*\.)?microsoftonlineimages\.com/.*$,Yes 

^(.*\.)?microsoftonlineimages\.com:443,Yes 

^http://([^:/]*\.)?microsoftonlinesupport\.net/.*$,Yes 

^(.*\.)?microsoftonlinesupport\.net:443,Yes 

^http://([^:/]*\.)?msecnd\.net/.*$,Yes 

^(.*\.)?msecnd\.net:443,Yes 

^http://([^:/]*\.)?msocdn\.com/.*$,Yes 

^(.*\.)?msocdn\.com:443,Yes 

^http://([^:/]*\.)?msn\.co\.jp/.*$,Yes 

^(.*\.)?msn\.co\.jp:443,Yes 

^http://([^:/]*\.)?msn\.co\.uk/.*$,Yes 

^(.*\.)?msn\.co\.uk:443,Yes

^http://([^:/]*\.)?msn\.com/.*$,Yes

^(.*\.)?msn\.com:443,Yes

^http://([^:/]*\.)?onmicrosoft\.com/.*$,Yes

^(.*\.)?onmicrosoft\.c

Also the domain list to allow per documentation above

For Custom category list covering all domains for MS-O-365 as of 7/2014 , please contact support.


There may also be other things to verify with a tcpdump of the actual traffic testing done to determine a cause of failure.

Link to this site:

https://campus.barracuda.com/solution/5016000000143fMAAQ