Microsoft Office 365 outage triggered by Meraki firewall false positive
An ongoing outage impacts more than one Microsoft 365 services, blocking off customers from connecting to Exchange Online, Microsoft Teams, Outlook computing device clients, and OneDrive for Business.
Microsoft Office 365 outage triggered by Meraki firewall false positive
While Microsoft says that this incident has handiest affected clients with inside the EMEA (Europe, the Middle East, and Africa) region, customers were reporting server connection troubles and sign-in disasters worldwide. "At this time, effect seems to be particular to a few customers who're served thru the affected infrastructure in Europe, Middle East, and Africa," the agency stated in a carrier alert. "We're reviewing device telemetry to isolate the supply of the issue. Additionally, we are operating with impacted customers to accumulate community hint logs to help our investigation." While Microsoft says it is nevertheless investigating the issue, this ongoing outage is maximum in all likelihood related to a Cisco Meraki firewall Intrusion Detection and Prevention (IDR) fake fine blocking off Microsoft 365 connections with "Microsoft Windows IIS denial-of-carrier attempt" alerts.Microsoft Office 365 outage due to Cisco Meraki firewall
"We would really like to make you privy to a vulnerability said via way of means of Microsoft CVE-2022-35748 , triggering SNORT rule 1-60381," a Cisco Meraki worker stated on Wednesday. "SNORT is effectively shielding your networks from a regarded vulnerability and consequently running as intended.
"Our advice at the moment is to observe Microsoft's steering and make certain that your Servers, OS and software program are updated with the modern day protection patches."
As shared via way of means of more than one clients who controlled to paintings round this issue, admins who need to repair Microsoft 365 connectivity on impacted structures can permit listing IPS rule ID 1-60381 from their organization's Meraki dashboard > Security & SD Wan > Threat Protection > Allow List rules.
Update August 10, 16:forty two EDT: Microsoft showed that the outage changed into the end result of Snort rule 1-60381 and says Cisco Meraki disabled the affected rule, with the extrude to propagate inside 1-2 hours.
Meraki Firewall false positive triggers an outage on Microsoft Office 365
Microsoft customers in the EMEA region have been hit with an ongoing outage to several Microsoft 365 services including Exchange Online, Microsoft Teams, Outlook desktop clients, and OneDrive for Business. The company has said the most likely reason for this is a Cisco Meraki firewall Intrusion Detection and Prevention (IDR) false positive which is blocking Microsoft 365 connections.
Related Articles:
- Microsoft Teams outage additionally takes down Microsoft 365 services
- Microsoft investigates ongoing Exchange Online, Outlook outage
- Microsoft 365 outage impacts Microsoft Teams and Exchange Online
- Massive Microsoft 365 outage because of defective ECS deployment
- Microsoft stocks workarounds for Outlook crashing after launch
