Hot!HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepoint

Author
kites182
New Member
  • Total Posts : 8
  • Scores: 0
  • Reward points: 0
  • Joined: 2020/02/11 18:26:01
  • Status: offline
2020/02/11 18:33:02 (permalink)
0

HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepoint

Hello to all,
 
Need some advice on how to fix this issue.
 
Our users suddenly cannot connect to Microsoft OneDrive and Sharepoint.
 
Here is the error. (attached the screenshot)
 
Thanks,
Kites
-=-

Attached Image(s)

#1

16 Replies Related Threads

    Forti500D
    New Member
    • Total Posts : 13
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/08/01 02:06:50
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 20:46:39 (permalink)
    0
    Hi kites182,
     
    did you check the forwarded logs? 
    #2
    kites182
    New Member
    • Total Posts : 8
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/02/11 18:26:01
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 22:12:04 (permalink)
    0
    Hi Forti500D,
     
    Yes, I have already checked the forward logs and it is leading to a Web Page Blocked because of Web Filter policies. However we haven't changed any settings and even if I add Sharepoint and Onedrive on allowed URL, it is still being blocked.
     
    I have discovered that turning off the SSL Certificate Inspection solves the issue temporarily but we cannot afford to have it that way.
     
    Thanks,
    Kites
    -=-
    #3
    Forti500D
    New Member
    • Total Posts : 13
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/08/01 02:06:50
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 23:06:19 (permalink)
    0
    did you try using different browsers without disabling SSL inspection??
    #4
    kites182
    New Member
    • Total Posts : 8
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/02/11 18:26:01
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 23:11:54 (permalink)
    0
    Hi Forti500D,
     
    Yes, all browsers are showing different versions of what it seems like a certificate error of some sort.
     
    -=-
    Thanks,
    Kites
    -=-
    #5
    Forti500D
    New Member
    • Total Posts : 13
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/08/01 02:06:50
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 23:13:33 (permalink)
    0
    did you enable deep inspection ???
    #6
    kites182
    New Member
    • Total Posts : 8
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/02/11 18:26:01
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 23:18:39 (permalink)
    0
    Hi Forti500D,
     
    Nope, I actually removed all SSL and DEEP PACKET INSPECTIONS as of this writing as all our users cannot use OneDrive and Sharepoint when it is turned on on our IPV4 policies.
     
    Thanks,
    Kites
    -=-
    #7
    Forti500D
    New Member
    • Total Posts : 13
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/08/01 02:06:50
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 23:48:48 (permalink)
    0
    Hi Kites,
    https://forum.fortinet.com/tm.aspx?m=152352 refer this i think this might help you
    #8
    kites182
    New Member
    • Total Posts : 8
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/02/11 18:26:01
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 23:51:30 (permalink)
    0
    Forti500D
    did you enable deep inspection ???




    Thanks. I will check it out.
     
    -=-
    Kites
    -=-
    #9
    kites182
    New Member
    • Total Posts : 8
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/02/11 18:26:01
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 23:52:34 (permalink)
    0
    Thanks. I will check out the link you gave. =) 
     
    -=-
    Kites
    -=-
     
    #10
    Forti500D
    New Member
    • Total Posts : 13
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/08/01 02:06:50
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/11 23:53:37 (permalink)
    0
    your welcome :) let me know the results 
    #11
    kites182
    New Member
    • Total Posts : 8
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/02/11 18:26:01
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/12 00:00:22 (permalink)
    0
    Forti500D
    your welcome :) let me know the results 




    Have checked it. Doen't work for me.
    What I have was SSL Certificate Inspection. That's what I removed just to have it working temporarily.
     
    Thanks,
    Kites
    -=-
    #12
    Johan Witters
    Bronze Member
    • Total Posts : 42
    • Scores: 0
    • Reward points: 0
    • Joined: 2015/06/03 04:06:12
    • Location: Belgium
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/12 04:02:08 (permalink)
    0
    Hi Kites,
     
    have you checked the certificate the browser complains about? Probably you get the default (self-signed) certificate presented by the Fortigate because of eithter SSL inspection or application control trying to decrypt the traffic. You can try to solve this by disabling inspection, or by installing the Fortigate certificates on the clients so they are trusted.
     
    You might want to check these:
    https://docs.fortinet.com...cate-into-web-browsers
    https://pub.kb.fortinet.com/ksmcontent/Fortinet-Public/current/FortiOSNotebook/fortios_certificate_management.pdf
     
    Good Luck,
     
    Johan
    #13
    tanr
    Platinum Member
    • Total Posts : 762
    • Scores: 34
    • Reward points: 0
    • Joined: 2016/05/09 17:09:43
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/12 07:31:06 (permalink)
    0
    Since this occurred with just certificate inspection, you really should check the logs to see what was actually happening. 
     
    It may be that the FortiGate was correctly giving an error for an invalid certificate on OneDrive or SharePoint servers, and its notification of this (with self-signed certificate) was what caused the result you saw.  But without analyzing the logs you won't know.
    #14
    tanr
    Platinum Member
    • Total Posts : 762
    • Scores: 34
    • Reward points: 0
    • Joined: 2016/05/09 17:09:43
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/12 07:36:48 (permalink)
    0
    Think I found what is probably causing this.
     
    Fortiguard just changed OneDrive/SharePoint to the "File Sharing" category, and lots of people are seeing stuff blocked because of this.
     
    See Per https://www.reddit.com/r/fortinet/comments/f2k95t/did_fortiguard_update_sharepoint_category_to_file/ for discussion.
    #15
    tanr
    Platinum Member
    • Total Posts : 762
    • Scores: 34
    • Reward points: 0
    • Joined: 2016/05/09 17:09:43
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/12 10:46:04 (permalink)
    0
    Looks like they reverted it, as https://fortiguard.com/webfilter?q=Sharepoint.com&version=8 now shows a category of information technology.
    #16
    kites182
    New Member
    • Total Posts : 8
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/02/11 18:26:01
    • Status: offline
    Re: HELP Needed please >>> Users suddenly cannot connect to Microsoft OneDrive and Sharepo 2020/02/19 23:09:53 (permalink)
    0
    Thanks for all your inputs!
    As per checking today, all Certificate Inspection Profiles are now working properly with all of my IPV4 policies.
     
    I haven't done anything.
     
    Seems like problem was with Fortiguard as posted by tanr on this threaad.
     
    Thanks again!
    Kites
    -=-
    #17
    Jump to:
    © 2020 APG vNext Commercial Version 5.5