Related rule in Firewall

Peter_1985 2,506 Reputation points
2020-10-28T09:38:47.64+00:00

Hi,
Which rule in Firewall can be related to following issue?

"IMAPD" 3824 60 "2020-10-28 17:11:20.994" "1?.?.?.?" "SENT: * OK IMAPrev1"
"IMAPD" 3804 60 "2020-10-28 17:11:21.009" "1?.?.?.?" "RECEIVED: 1 capability"
"IMAPD" 3804 60 "2020-10-28 17:11:21.009" "1?.?.?.?" "SENT: * CAPABILITY IMAP4 IMAP4rev1 CHILDREN IDLE QUOTA SORT ACL STARTTLS NAMESPACE RIGHTS=texk[nl]1 OK CAPABILITY completed"
"IMAPD" 3824 60 "2020-10-28 17:11:21.009" "1?.?.?.?" "RECEIVED: 2 STARTTLS"
"IMAPD" 3824 60 "2020-10-28 17:11:21.009" "1?.?.?.?" "SENT: 2 OK Begin TLS negotiation now"
"DEBUG" 3804 "2020-10-28 17:11:21.009" "Performing SSL/TLS handshake for session 60. Verify certificate: False"
"TCPIP" 3804 "2020-10-28 17:11:21.040" "TCPConnection - TLS/SSL handshake completed. Session Id: 60, Remote IP: 1?.?.?.?, Version: TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256, Bits: 128"
"DEBUG" 3804 "2020-10-28 17:11:21.056" "The read operation failed. Bytes transferred: 0 Remote IP: 1?.?.?.?, Session: 60, Code: 336151572, Message: sslv3 alert certificate revoked"

I want to know which Inbound rule (or port) is leading to issue.

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,463 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,149 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,754 questions
{count} votes

1 answer

Sort by: Newest
  1. Sunny Qi 10,896 Reputation points Microsoft Vendor
    2020-10-29T03:12:00.503+00:00

    Hi,

    Thanks for posting in Q&A platform.

    Before we go further, could you please help to confirm where did you find above content?

    Is this issue can be tracked by any related Event log? If yes, could you please help to provide the Event ID for further troubleshooting.

    Best Regards,
    Sunny