cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1274
Views
2
Helpful
2
Replies

MS store downloads not working via umbrella

AdrianM1
Level 1
Level 1

Does anyone have the issue where the MS store downloads do not work via umbrella.

This is whether it is behind a network or via roaming client using AnyConnect.

If I stop the AnyConnect service on the PC the download works just fine.

I have permitted many of the MS domains I could to the dont decrypt list. I cant find any domain that is blocked so I cant figure what is causing this.

Thanks

1 Accepted Solution

Accepted Solutions

amojarra
Cisco Employee
Cisco Employee

Hi @AdrianM1 

 

Sometimes since the download from Microsoft Store is split into smaller chunks of downloads (Microsoft is using range request downloads method), which this method is unable to be scanned by our anti virus since we are expecting a whole file to be downloaded and this caused the anti virus to detect the file as corrupt and block the download.

 

Here are 2 options:

[1] Add `mp.microsoft.com` to [Web Selective Decryption](https://docs.umbrella.com/umbrella-user-guide/docs/add-web-selective-decryption-list) domains and applying the list to [Web Policy]( https://docs.umbrella.com/umbrella-user-guide/docs/add-a-rules-based-policy) will prevent this behavior from occurring.

[2] Add `mp.microsoft.com` to Domain Management > External Domains & IPs will bypass the traffic from SWG proxy completely.

 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

Regards,
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++

View solution in original post

2 Replies 2

amojarra
Cisco Employee
Cisco Employee

Hi @AdrianM1 

 

Sometimes since the download from Microsoft Store is split into smaller chunks of downloads (Microsoft is using range request downloads method), which this method is unable to be scanned by our anti virus since we are expecting a whole file to be downloaded and this caused the anti virus to detect the file as corrupt and block the download.

 

Here are 2 options:

[1] Add `mp.microsoft.com` to [Web Selective Decryption](https://docs.umbrella.com/umbrella-user-guide/docs/add-web-selective-decryption-list) domains and applying the list to [Web Policy]( https://docs.umbrella.com/umbrella-user-guide/docs/add-a-rules-based-policy) will prevent this behavior from occurring.

[2] Add `mp.microsoft.com` to Domain Management > External Domains & IPs will bypass the traffic from SWG proxy completely.

 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

Regards,
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++

Thank you Amirhossein