MS Teams Aplication Performance Issue –Intermittently

[RoneyRajan123]

Hi Team,

We have received reports from three customers experiencing intermittent performance issues with the MS Teams application, specifically with audio and video not functioning properly.

Troubleshooting Steps Performed (Palo Alto Firewall):

✔ Removed all security profiles from the policy
✔ Configured QoS and assigned guaranteed bandwidth for MS Teams audio & video
✔ Applied application override for MS Teams and MS Team Audio and Video traffic
✔ Upgraded the firewall to the latest preferred release

Despite these actions, the issue persists. However, I have observed that clearing the session improves performance temporarily, which suggests a session-related problem.

Additional Information:

• All three customers are using ADSL connections.

I suspect this may be related to session handling on the firewall. Please share your insights or recommendations on further troubleshooting.

NGFW @kiwi @Adrian_Jensen @ahameed @mshamamulla @paloalto 

[mshekh]

Hi @RoneyRajan123 ,

Recommendation is to open a support case and work with tac team to identify the issue and fix 

[D.Martinez136027]

I’m experiencing the same issue since yesterday.

Please let me know if you find a solution. I plan to open a ticket tomorrow.

[RoneyRajan123]

Hi @D.Martinez136027 

Please let me know what is the update from TAC, Actually, I have received complaints from 3 customers who are facing a similar issue.

[RoneyRajan123]

hi Team

anyone have any updates?

@D.Martinez136027 

[emr_1]

https://status.paloaltonetworks.com/incidents/d3bs717c7yq8

Even this information is for prisma access, you might find the hints. If you are using decryption rules, bypass rule might help you.

[c_zellars]

May be a bit late for some but this issue turned out to be with Microsoft pushing certs with a broken cert chain. In the Decryption logs you can search for 

 (err_index eq Certificate) and ( root_status eq 'untrusted' ) For our case it was with the following  ( issuer_cn eq 'Microsoft Azure RSA TLS Issuing CA 08' ). We contacted MS and they fixed the cert issue on their side. Another option would've been uploading and trusting the cert in Panorama and pushing to devices but that of course could lead to other issues such as if the cert was compromised or revoked and then we would sit there with that bad cert if we didnt catch it in time.