Overview
When attempting to download and update Microsoft Office 365 behind Kerio Control, users may encounter issues due to content filter restrictions on .cab files, and the following may be seen in the filter logs (provided logging is enabled for content rules):
[19/Feb/2025 10:13:20] DENY [Rule] 'Kerio Control Web Filter categories and applications' [Source] 10.10.10.13 [User] - [Content] HTTP HEAD http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v64_16.0.18429.20158.cab
This article provides steps to resolve these issues by adjusting the content filter and enabling necessary services.
Information
To resolve issues with downloading and updating Microsoft Office 365 behind Kerio Control, follow these steps:
- If no entries are found in the Filter logs, enable logging in the Content Filter rule:
- Replicate the issue and confirm the above log entries in the Filter Log
-
Remove Content Filter Restrictions:
- Access the Kerio Control administration interface.
- Navigate to the Web Filter settings.
- Locate the content rule named "Kerio Control Web Filter categories and applications." (this is the rule that usually blocks these, but there may be others; check as well any rules identified in Step 2)
- Remove the restriction on .cab files to allow their download.
-
Enable Necessary Office 365 Services:
- Go to the content rules section and configure the rule as per the steps for Allowing Office 365 traffic.
- Ensure that the services "Office 365" and "MS Office Protocol Discovery" are enabled within this rule.
-
Test the Installation:
- Attempt to download and install Microsoft Office 365 again.
- Monitor the logs to ensure there are no DENY entries related to .cab files or Office 365 services.
By following these steps, you should be able to successfully download and update Microsoft Office 365 behind Kerio Control.
Frequently Asked Questions
- Q1: What should I do if .cab files are being blocked during the Office 365 installation?
- A1: You should remove the restriction on .cab files in the Kerio Control Web Filter categories and applications rule to allow their download.
Q2: Which services need to be enabled in the Microsoft content rule for Office 365?- A2: Ensure that the "Office 365" and "MS Office Protocol Discovery" services are enabled in the Microsoft content rule.
Q3: How can I verify that the changes have resolved the issue?- A3: After making the changes, attempt to download and install Microsoft Office 365 again. Check the logs to ensure there are no DENY entries related to .cab files or Office 365 services.
Ciprian Nastase
Comments