topic Re: IE Slowness for Webmail in Endpoint

IE Slowness for Webmail

Arjun_Sawant — Mon, 30 Jul 2018 16:26:09 GMT

Hi,

We are using office365 for mailing and have already registered with Microsoft for security stuffs like malware, spam and others. In checkpoint we are using Anti-Ransomware, Anti-bot and TE.

We are facing IE slowness/crash for webmail, we have exlcude the below domains in TE.

outlook.office.com

outlook.office365.com ....but still having same issue.

Requirement is;

1. Webmail should not scan by sandblast (Checkpoint any blade)

2. How can we confirm/verify the webmail webpage is scan by sandblast?

Thanx

Re: IE Slowness for Webmail

PhoneBoy — Mon, 30 Jul 2018 18:34:29 GMT

Plenty of customers use SandBlast Agent with Office365 precisely because Microsoft doesn't block enough on it's own (even when you sign up for their extra security services).

Also, it's not likely that this is the cause of your issues since:

Anti-Bot blocks access to known Command and Control sites (which Office365 clearly is not)
Threat Emulation only activates when you download attachments
Anti-Ransomware is relevant when code executes from EXEs or similar

I recommend opening a TAC case so we can properly troubleshoot what's going on.

Re: IE Slowness for Webmail

Nüüül — Mon, 30 Jul 2018 22:20:08 GMT

Do you:

..see any Log messages in SmartLog regarding this or other blocked connections?

..have HTTPS Inspection enabled?

..have Performance Impacts on other sites (i.e. some other from Office 365 and completely different)?

..have any Problems with Using /Activation of Word/Excel and so on?

..any other web mailer?

How is the firewall/Clients configured? with Proxy? ist the Firewall the proxy?

You disabled TE for just the two DNS A Records outlook.office.com and outlook.office365.com? How did you configure this?

Daniel

Re: IE Slowness for Webmail

Arjun_Sawant — Tue, 31 Jul 2018 13:03:03 GMT

Hi,

Thanx for update..

For your information;

.see any Log messages in SmartLog regarding this or other blocked connections?

.....There is no any blocked connections.

..have HTTPS Inspection enabled?

....No.

..have Performance Impacts on other sites (i.e. some other from Office 365 and completely different)?

.....There is no issue for other websites.

..have any Problems with Using /Activation of Word/Excel and so on?

.....How can we check on that?

..any other web mailer?

....NO

How is the firewall/Clients configured? with Proxy? ist the Firewall the proxy?

......Firewall is not configured as proxy, we have separate appliance for proxy.

You disabled TE for just the two DNS A Records outlook.office.com and outlook.office365.com? How did you configure this?

We have exclude outlook.office.com and outlook.office365.com in TE. In,

SandBlast Agent Threat Extraction and Emulation settings for the entire organization ---> Inspect all domains and files

How can we check/verify whether webmail webpage is scanning by sandblast or not? Any debug?

We have verified that by uninstalling sandblast agent, webmail work perfectly fine, so we need to completely bypass webmail in sandblast.

Thanx

Arjun

Re: IE Slowness for Webmail

PhoneBoy — Tue, 31 Jul 2018 16:57:10 GMT

As I suggested previously, I recommend opening a TAC case so we can troubleshoot what's going on.

Contact Support | Check Point Software

Re: IE Slowness for Webmail

Arjun_Sawant — Wed, 01 Aug 2018 06:32:26 GMT

Already opened.. It's pending with development team for long time

On Tue 31 Jul, 2018, 10:27 PM Dameon Welch Abernathy, <

Re: IE Slowness for Webmail

PhoneBoy — Wed, 01 Aug 2018 06:44:08 GMT

Will need the SR# privately so I can investigate what's going on.

Re: IE Slowness for Webmail

Arjun_Sawant — Wed, 01 Aug 2018 10:53:53 GMT

Hi,

Service Request # 3-0395040181

Re: IE Slowness for Webmail

PhoneBoy — Wed, 01 Aug 2018 16:11:50 GMT

I've escalated the ticket, hopefully we'll see some movement soon.

Re: IE Slowness for Webmail

Arjun_Sawant — Wed, 01 Aug 2018 17:28:16 GMT

Thanx a lot..

On Wed 1 Aug, 2018, 9:42 PM Dameon Welch Abernathy, <

Re: IE Slowness for Webmail

Hugo_vd_Kooij — Thu, 02 Aug 2018 13:18:44 GMT

As far as exceptions go you may need to have a heavy list there for all various components of Office365.

EXchange Online for example should be:

"*.mail.protection.outlook.com","*.outlook.com","*.outlook.office.com","*.protection.outlook.com","*.store.core.windows.net","*.um.outlook.com","asl.configure.office.com","autodiscover-*.outlook.com","domains.live.com","mshrcstorageprod.blob.core.windows.net","outlook.office365.com","r1.res.office365.com","r3.res.office365.com","r4.res.office365.com","smtp.office365.com","tds.configure.office.com","xsi.outlook.com"

Another reason for bad performance issues:

DNS

Either a bad or slow DNS server will kill your Office365 performance. I have seens several issues whenre the customer was using google as DNS and it was sending Office365 to a US datacenter instead of a EU datacenter. That will give you a poor latency and hence a poor experience.

Re: IE Slowness for Webmail

Arjun_Sawant — Fri, 03 Aug 2018 03:10:26 GMT

Is it require to all exclude?

Also how can we verify that webmail webpage is not scanning by Sandblast?

On Thu 2 Aug, 2018, 6:49 PM Hugo van der Kooij, <donotreply@checkpoint.com>

Re: IE Slowness for Webmail

Chinmaya_Naik — Wed, 08 Aug 2018 12:29:28 GMT

Dear Sir,

As we see the issue when we install the client package on the windows machine.

The important things are that when we install package, google chrome is working perfectly even we access webmail.

but the only issue with IE the fact is that on both browsers sandblast agent is working.

Webmail (O365)we able to access but its too slow and because of more slowness most of the time explorer is crash.