Office 2013

[Guest]

[enduser]

I´m facing problems with office 2013. I keeps prompting for user and password, no matter what I do. I does not solve if I save my credentials.
I read on the internet, to add microsoft sites to bypass the proxy?
However, as far as I know, It is possible to do that only on transparent proxy. I use non transparent, authenticated proxy. Is it possible to by pass destinations on authenticated proxy?

PS: endian 2.5.2, serving around 300 clients

Thanks

[jpin]

A little more info.  Are you connecting from outside to an internal mail server or connecting from inside to an Office 365 Exchange server?   Or is it a pop or Imap account?

[enduser]

Hi, Its not office 365. It is the professional edition 2013, installed on our local machines.

When these client machines open microsoft word, powerpoint or excel, a dialog box pop-up asking for credentials, while Internet Explorer or any other browser, works perfectly, without asking for credentials (endian joined the domain with NTLM authentication). I can´t find a solution. Any clues?

Thanks.

[jpin]

I'm pretty sure you can't bypass a non transparent proxy.   Is there anything in your http proxy logs that might show what and why its getting blocked.

[enduser]

Hi Jpin,

In my live http proxy view, I can see that endian is blocking several microsoft sites :

Web prox..
2014-05-23 10:29:16
0 10.0.11.102 TCP_DENIED/407 3336 OPTIONS office.microsoft./client/15/ - NONE/- text/html
Web prox..
2014-05-23 10:29:16
1 10.0.11.102 TCP_DENIED/407 3569 OPTIONS office.microsoft./client/15/ - NONE/- text/html
Web prox..

Another site blocked that also shows up in the log is: odc.officeapps.live.

However, all of them are allowed at "Custom black- and whitelists"

This is my whitelist:

4shared.
dropbox.
*.skype.
productactivation.one.microsoft.
*.windowsupdate.
windowsupdate.
*.microsoft.
odc.officeapps.live.
skype.
amazonaws.

PS: This forum did not allow me to post links, so I had to remove .com from the addresses. On the actual whitelist, i have .com

I know that the whilelist is working, because dropbox, 4shared and amazonaws were not accessible before adding them to the whitelist
Everything is correct, right? This is driving me crazy.

Thanks

[jpin]

I'm new to Endian as well so I can only guess with my limited knowledge with the device.  Are you able to add your white list items with multiple wildcards like *.microsoft.*? 

[enduser]

Hi,

I think so, but whats the point?

[jpin]

I'm wondering if it could be connecting to another domain level per the log "office.microsoft./client/15/"   its not listed as microsoft.com/client/15 its listing it as microsoft./client/15  I'm not sure if that's just the rule or the actual address its trying to reach. 

[enduser]

Jpin

It is listing office.microsoft./client/15/ because I removed "com" and the as I could´t post my post due to the forum restrictions.

[jpin]

Jpin

It is listing office.microsoft./client/15/ because I removed "com" and the as I could´t post my post due to the forum restrictions.

ah your right sorry I'm an idiot forgot about that completely.  Sorry I'm not sure on this one.  You still might add a wild card after the .com just to see if it helps.  It looks more like it is an issue with the white list not applying for some reason.  Maybe a more experienced user will chime in soon.

[enduser]

It seems to be a new and spreaded problem not only with endian, but with any other proxy, including microsoft's. Have a look:

social.technet.microsoft.com/Forums/ie/en-US/11370f4d-b931-4338-8ab7-acc9e1a231e0/outlook-2013-asks-for-credentials-connecting-to-exchange-2010-multiple-times?forum=officeitpro
edugeek.net/forums/internet-related-filtering-firewall/103905-office-2013-displays-lot-credential-prompts-smoothwall-ntlm.html

Dont forget .com and www

People as complaining all over the internet. I hope some one more experienced can clarify that. I will not be able to put endian in prodution just because of this fuckin** problem
It seems everyone who will upgrade to office 2013 will face this problem eventually.

Thanks.