Unable to log in to Consumer Skype using Microsoft account through the ProxySG

book

Article ID: 167044

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

You are able to log in to Consumer Skype using your Skype account, but are unable to log in to Consumer Skype using your Microsoft Account.

Resolution

Background

  • A login to the Consumer Skype application using a Microsoft account is authenticated via https://login.live.com domain.
  • Since the Consumer Skype application is unable to install CA certificates from the ProxySG, intercepting the SSL traffic to login.live.com will cause SSL client handshake completion failure, as the customer certificates from ProxySG are not trusted by the Consumer Skype application.
Note: In explicit proxy mode, check to see if the Explicit HTTP service has Detect Protocol enabled. If yes, then proceed to the steps below.
Otherwise, if Detect Protocol is not enabled, then the steps below are not needed.

 
Action
 
The solution is to bypass the Microsoft IP range and the live.com domain from the SSL Intercept Layer, as shown below. 
- live.com
- 111.221.64.0/255.255.192.0 
- 65.52.0.0/255.252.0.0  
 

Depending on which region are you in, you may also need to bypass these ranges:

- 134.170.0.0/16    
- 64.4.0.0/18

 
 
 


In some cases, you will need to bypass hotmail.com as well when the user signs in with a Hotmail account.

Attachments