topic Re: Unable to connect to https://login.microsoftonline.com in General Topics

Unable to connect to https://login.microsoftonline.com

Kalemegdan — Mon, 10 Apr 2017 20:05:09 GMT

The whole company behind PAN firewall is unable to connect to https://login.microsoftonline.com.

no blocked page, just "sign in to your account" web portal but no place to login. Firewall does not show any blocked/dropped connection to this URL.

I create a brand new test rule, put on top of the rule sets but no luck.

Any suggestions/idea appreciated.

Re: Unable to connect to https://login.microsoftonline.com

TranceforLife — Mon, 10 Apr 2017 20:25:52 GMT

Create a test rule without any security profiles, allow any (or test PC) any, services any application also any. Test again. Still fails?

Re: Unable to connect to https://login.microsoftonline.com

Kalemegdan — Mon, 10 Apr 2017 20:37:01 GMT

Yup no luck

Re: Unable to connect to https://login.microsoftonline.com

TranceforLife — Mon, 10 Apr 2017 20:43:04 GMT

Most likely this is not PA issue. Any other inline devices that could cause this? When did it happen? Only this particular website?

Re: Unable to connect to https://login.microsoftonline.com

Kalemegdan — Mon, 10 Apr 2017 20:41:36 GMT

So far only this url..

Re: Unable to connect to https://login.microsoftonline.com

TranceforLife — Mon, 10 Apr 2017 20:57:20 GMT

Post a screenshot please of exactly what you see. Different browser?

Re: Unable to connect to https://login.microsoftonline.com

Kalemegdan — Mon, 10 Apr 2017 21:27:37 GMT

i actually find the issue; some of the required ap[plications to get login.microsoftonline.com were disabled;

I created a new rule to allow ms-office365, ssl, stun and web-browser to get it going..

Re: Unable to connect to https://login.microsoftonline.com

TranceforLife — Mon, 10 Apr 2017 21:32:39 GMT

If this is the case why the test with application and services as any didn't work?

Re: Unable to connect to https://login.microsoftonline.com

Kalemegdan — Mon, 10 Apr 2017 21:49:08 GMT

That was my question to PAN support - i opened a case and showed them the config logs but they were unable to figure it out 😞

Re: Unable to connect to https://login.microsoftonline.com

TranceforLife — Mon, 10 Apr 2017 21:54:10 GMT

Hmm. Good to know anyway :0

Re: Unable to connect to https://login.microsoftonline.com

BPry — Tue, 11 Apr 2017 13:33:40 GMT

@Kalemegdan,

Depending on the rest of your configuration and your applicaiton time-out lengths the session you were using could have already been 'open' when you committed your test rule and it never actually checked your security policy list again for that session. It might be a good idea going forward if you haven't already when testing new policies to simply clear the session table for your specified source IP; this at least insures that your not matching a session already on the session table.

Re: Unable to connect to https://login.microsoftonline.com

Kalemegdan — Tue, 11 Apr 2017 14:30:55 GMT

Good point but i actually tested access from different workstations with the same results.

Still puzzled with the fact that i was unable to get a clear answer from support personel about "differences" in configuration.