Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Zenarmor (Sensei)
»
ecs.office.com - block or allow?
« previous
next »
Print
Pages: [
1
]
Author
Topic: ecs.office.com - block or allow? (Read 1057 times)
Greg_E
Full Member
Posts: 247
Karma: 13
ecs.office.com - block or allow?
«
on:
July 02, 2024, 10:00:49 pm »
I just set up my OPN Business on the "permanent" hardware and with it there was an update to Zenarmor that I hadn't done on the "testing" computer I was using before this... I'm now seeing an ecs.office.com block which is some kind of Microsoft "automatic" Office configuration and update utility that was probably running through unseen on the old firewall.
Do I kill it or let it pass? Yes I do have Office (2021 LTSC) installed on pretty much every desktop here. I'm just not familiar with it and wondering two things:
#1 will it mess up my Office installs?
#2 does Office (local install but KMS activated) still work if I block it?
I should mention that the last time I did any real looking at the firewall and what might be getting blocked, I was running Windows 10 LTSC 21h2, now I'm on Windows 11 Education 23h2 so a lot of change on all my desktops.
Logged
sy
Hero Member
Posts: 585
Karma: 44
Re: ecs.office.com - block or allow?
«
Reply #1 on:
July 04, 2024, 05:25:51 pm »
Hi,
I advise you to allow it. It seems a necessary domain for office.
Logged
Greg_E
Full Member
Posts: 247
Karma: 13
Re: ecs.office.com - block or allow?
«
Reply #2 on:
July 05, 2024, 03:27:48 pm »
That's what I thought and what I did. How many domains can Microsoft use for their products? I guess they want to be able to track everything and spread it out so that it doesn't look suspicious. Them and Adobe.
It's also interesting that Zenarmor blocks subdomains, I was using e2gaurdian on PFsense before and it would need to block/pass the entire top level domain.
Logged
chemlud
Hero Member
Posts: 2430
Karma: 111
Re: ecs.office.com - block or allow?
«
Reply #3 on:
July 05, 2024, 04:31:35 pm »
If you want to block MS (as an example):
https://www.reddit.com/r/pihole/comments/m77wcp/windows_10_blocking_list/?rdt=47224
Good luck! :-)
Logged
kind regards
chemlud
____
"The price of reliability is the pursuit of the utmost simplicity."
C.A.R. Hoare
A router is not a switch - A router is not a switch - A router is not a switch - A rou....
Greg_E
Full Member
Posts: 247
Karma: 13
Re: ecs.office.com - block or allow?
«
Reply #4 on:
July 05, 2024, 09:57:51 pm »
I was seeing a bunch of other things getting blocked under the "Cloud Services", so I just enabled the whole thing for right now why I'm working on something. I'll go back and build exclusions when I have time.
Logged
Seimus
Hero Member
Posts: 502
Karma: 50
Re: ecs.office.com - block or allow?
«
Reply #5 on:
July 06, 2024, 11:44:32 am »
Thats the bother of L7 FWs,
No vendor has proper or complete lists that would block or permit everything perfectly. Its up to fine tuning it after deployment.
What you can to help overall, which I do as well. If I find a domain that is blocked but shouldn't be, thus its a false positive, I report it to ZenArmor team and ask for re-categorization. You can do it via their portal on the web page or if you have a huge list open the a ticket via GUI.
Regards,
S.
Logged
Networking is love. You may hate it, but in the end, you always come back to it.
OPNSense HW
APU2D2 - deceased
N5105 - i226-V | Patriot 2x8G 3200 DDR4 | L 790 512G -
VM HA(SOON)
N100 - i226-V | Corsair 16G 4800 DDR5 | S 980 500G -
PROD
Greg_E
Full Member
Posts: 247
Karma: 13
Re: ecs.office.com - block or allow?
«
Reply #6 on:
July 15, 2024, 03:35:08 pm »
The blocks that I'm certain shouldn't be blocked, I do report back when I make the exception.
Logged
sy
Hero Member
Posts: 585
Karma: 44
Re: ecs.office.com - block or allow?
«
Reply #7 on:
July 15, 2024, 08:35:09 pm »
Hi,
The team is processing these entries. Thanks for your feedback.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Zenarmor (Sensei)
»
ecs.office.com - block or allow?