07-26-2023 03:18 AM
Does anyone have the issue where the MS store downloads do not work via umbrella.
This is whether it is behind a network or via roaming client using AnyConnect.
If I stop the AnyConnect service on the PC the download works just fine.
I have permitted many of the MS domains I could to the dont decrypt list. I cant find any domain that is blocked so I cant figure what is causing this.
Thanks
Solved! Go to Solution.
07-27-2023 02:07 AM
Hi @AdrianM1
Sometimes since the download from Microsoft Store is split into smaller chunks of downloads (Microsoft is using range request downloads method), which this method is unable to be scanned by our anti virus since we are expecting a whole file to be downloaded and this caused the anti virus to detect the file as corrupt and block the download.
Here are 2 options:
[1] Add `mp.microsoft.com` to [Web Selective Decryption](https://docs.umbrella.com/umbrella-user-guide/docs/add-web-selective-decryption-list) domains and applying the list to [Web Policy]( https://docs.umbrella.com/umbrella-user-guide/docs/add-a-rules-based-policy) will prevent this behavior from occurring.
[2] Add `mp.microsoft.com` to Domain Management > External Domains & IPs will bypass the traffic from SWG proxy completely.
Regards,
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++
07-27-2023 02:07 AM
Hi @AdrianM1
Sometimes since the download from Microsoft Store is split into smaller chunks of downloads (Microsoft is using range request downloads method), which this method is unable to be scanned by our anti virus since we are expecting a whole file to be downloaded and this caused the anti virus to detect the file as corrupt and block the download.
Here are 2 options:
[1] Add `mp.microsoft.com` to [Web Selective Decryption](https://docs.umbrella.com/umbrella-user-guide/docs/add-web-selective-decryption-list) domains and applying the list to [Web Policy]( https://docs.umbrella.com/umbrella-user-guide/docs/add-a-rules-based-policy) will prevent this behavior from occurring.
[2] Add `mp.microsoft.com` to Domain Management > External Domains & IPs will bypass the traffic from SWG proxy completely.
Regards,
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++
07-31-2023 05:25 AM
Thank you Amirhossein
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide