DirSync Sync with Firewall

Question

Hi,

I have Dirsync working fine for some months. now I have changes in the firewall 

1. I have used ISA Server 2006 as firewall, created rules and change the machine.config file on dirsync server with proxy settings. after all works fine.
2. Now I have fortigate 100D, after i moved to this i have started problem, the ip address of the ISA and Fortigate are same as i have removed ISA already. after i found the issue with dirsync I did changes in the machine.config file by removing the proxy address and leave the systemdetault=true. 

but still i am getting problem... I have checked Missclient tenant.onmicrosoft.com-AAD, when i run for delta sync- success, but delta import- stopped-dll-extension...

please help.

Answer 1

HI,

Finally, I have done a scheme refresh in Connectors on Missclient for azureAD, then the sync runs fine...

Answer 2

hI,

i Just need to clarify on my part,

1. I have changed the firewall server once then i have been getting problem with sync. Hence the below changes i did it on machine.config

removed proxy settings( ISA Server)  from machine.config

<system.net>

   <defaultProxy>

     <proxy

       usesystemdefault="true"

       proxyaddress="http://192.168.4.1:80"

       bypassonlocal="true"

     />

   </defaultProxy>

 </system.net>

changed to

 <system.net>

   <defaultProxy enabled="true">

     <proxy usesystemdefault="true" />

   </defaultProxy>

 </system.net>

and reset the proxy with netsh winhttp

even after the delta import and export showing "stopped-extension-dll" on miisclient

eventid 6900 - "Unable to establish a connection to the authentication service

,611 -Password synchronization failed for domain:

Answer 3

Hi Mohamed, you also can configure proxy in Operating System - technet.microsoft.com/.../cc731131(v=ws.10).aspx

If you find the posts helpful, please click “Yes” button to “Was this helpful” under the posts. Therefore, other users might benefit from our posts when they have similar questions.

Answer 4

Hi MohamedFarook8840,

To check if the tool can access Office 365 without issues, please make sure all the IP addresses/Ports used by Office 365 are not blocked by the proxy/firewall server. You can find all the IP/port lists used in Office 365 by referring to: https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2.

If you have make sure the connections are no blocked by the firewall/proxy server, since the issue only occurs after you deploy the new server, the issue could be related to the server settings. We suggest you contact the support of the firewall/proxy and check if any extra steps need to be performed before the sync can run without issues.