topic Re: Unable to share Microsoft Whiteboard when connected to Global Protect in General Topics

Unable to share Microsoft Whiteboard when connected to Global Protect

jhwarren — Thu, 12 Dec 2019 23:08:23 GMT

I don't see any drops and suspect it is failing with connecting via authentication or something along those lines. Works fine but as soon as a user connects to GP, whiteboard sharing no longer works. Curious if anybody else has run into this?

Thanks!

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

aleksandar.astardzhiev — Fri, 13 Dec 2019 12:29:16 GMT

Hi @jhwarren ,

You need to provide more information, with this poor explanation of the problem it is shooting in the dark.

- Do you use full tunnel or split-tunnel VPN?

- How is you security policy look like? Do you allow specific ports or using AppID?

- How is you GP gateway configured - are you route the traffic base on route, domain or application?

- Have you understand how whiteboard is working? Do you know what port, protocol is used? From which direction the traffic is initiated - is it possible that you need rule allowing traffic from inside to GP VPN?

You need to understand that GlobalProtect is just building logical connection from the user PC to the firewall, after that is down to basic network principles - do you have route, do you have fw rule allowing traffic, do you have reply routed back.

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

M_Fredrickson — Thu, 02 Jan 2020 20:33:39 GMT

https://blogs.technet.microsoft.com/the_microsoft_excel_support_team_blog/2014/03/24/office-2013-reports-no-internet-connectivity-with-vpn-connection/

https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB43805

We're running into this issue as well but here's what I was able to dig up. Issue likely is related to the Microsoft NLA & NCSI protocols mentioned above. All the rest of our MS products seem to work except MS Whiteboard. I have a hunch that it has been fixed for other MS Products as the person who brought it to our attention stated, "OneNote had the same issue and was fixed some months ago." There was no intervention from us or anyone else that I'm aware.

Fails on both GP Split-Tunnel and Full Tunnel (we have both) set to loopback interfaces, Default Gateway 0.0.0.0. It works on our Anyconnect VPN client which has a numbered Default Gateway.

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

OtakarKlier — Thu, 02 Jan 2020 21:56:32 GMT

Hello,

Its probably an application that is missing or the traffic is being decrypted. Either way make sure you have logging enabled on all of your policies to see where the traffic is getting blocked or decrypted.

Regards,

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

jhwarren — Wed, 22 Jan 2020 00:46:21 GMT

If something is missing, it is not obvious -captures match-up and nothing is dropped that is apparent, I've compared captures from the PA with and without GP and they are similar, so no smoking gun on that front. Given the previous comment of somebody else who is also seeing this, their explanation sounds plausible. Thanks for giving it a think!

John

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

jhwarren — Wed, 22 Jan 2020 00:52:16 GMT

Hello Alexander,

I was vague by intent - I was looking to see specifically if anybody (besides me) was seeing this issue with regards to GP. The reply from a user who also is experiencing this is what I was looking for. I'd also be interested if anybody is using GP and whiteboard does work under that scenario, for what it's worth.

We have a full sweet of cloud-services in-use from Microsoft and this is the only one that has given us any challenge. The usual captures, debugs and such have all failed to produce any reliable leads towards figuring this out.

I appreciate the response - I have looked through and compared a working client and non-working client and nothing jumps out in the captures. I created custom policies and wired them for sound (in terms of logging 🙂 ) and again no useful info revealed itself in those.

How it works is a challenge - I am waiting on MS to weigh-in on that front but I may have a while before I hear back from them 🙂

Thanks for your insight,

John

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

tonyrobson — Thu, 27 Feb 2020 12:38:18 GMT

I don't suppose you found a solution to this by chance did you? I have the same issue at present.

Cheers.

Tony.

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

jhwarren — Fri, 28 Feb 2020 00:09:19 GMT

Not yet - the ticket with MS premier support is now at Tier-2 and they have asked for some diagnostics to be collected to help them analyze the issue (a 16-step process using Fiddler and a couple of other tools). I'll update once they respond to the information provided.

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

tonyrobson — Fri, 28 Feb 2020 15:51:56 GMT

Ah great, thanks for the update - that sounds like a real pain, so I won't go down that route just yet unless you find yourself at a dead end!

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

proczko — Wed, 25 Mar 2020 11:57:47 GMT

This Microsoft article might be helpful as we have run into the same issue and are going to add RFC1918 addresses [intranet space] to the GPO

https://support.microsoft.com/en-us/help/3036542/this-page-failed-to-load-error-when-you-run-windows-store-apps-in-wind

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

M_Fredrickson — Wed, 25 Mar 2020 13:39:25 GMT

Has this fix to add RFC1918 space to the GPO been proven to resolve the issue? Or is it a test?

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

proczko — Wed, 25 Mar 2020 14:00:50 GMT

We are currently testing as we are trying to minimize all out changes as you should. I will update when more info is available.

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

LJarman1 — Wed, 09 Sep 2020 03:58:55 GMT

What was the fix for this in the end?

Re: Unable to share Microsoft Whiteboard when connected to Global Protect

M_Fredrickson — Wed, 09 Sep 2020 13:23:59 GMT

The issue resolved itself without making any changes in our environment. I have feeling Microsoft made updates to the Whiteboard app, but never took the time to run pcaps again to verify what changed.