After migration to Palo, seeing Exchange ActiveSync event ID 1040

[ksauer507]

We migrated from a Cisco ASA platform this weekend to PA-3220 Active/Standby pair on Panos 10.0.8-h8.

We worked through minor issues during the process but had the network fully operational in about 3 hours.

One thing I notice since the conversion is MSExchange ActiveSync Event ID 1040 pretty consistent.  We have a fair number of employees with email on phones, and we still have Exchange on premise (we’ll move later in the year to the cloud).  

Here is the error (though I see ZERO issues on iPhone mail app to exchange)…. And I followed the traffic flow from my home IP (iPhone on WiFi) to Exchange and it’s detected as ssl, and inside that says web-based-email.

The average of the most recent heartbeat intervals [540] for request [Ping] used by clients is less than or equal to [540].
Make sure that your firewall configuration is set to work correctly with Exchange ActiveSync and direct push technology. Specifically, make sure that your firewall is configured so that requests to Exchange ActiveSync do not expire before they have the opportunity to be processed.