Greetings, I have users on a internal network with Internet access
blocked. We have MS Office installed on their workstations and I
authorized them on a different vlan *with* internet access. (They're the
per-machine perpetual licenses that ship with...
Confirmed this as the solution, thanks again. The default deny-all
policy we were letting these guys run into doesn't let you set the
send-deny-packet. I got rid of the ISDB deny rule for Office 365 and
made a new blanket deny-internet rule with send...
Thanks, this is what I was expecting, and presume the version of this
rule on the Juniper was doing that and the migrated rule on the Fortinet
isn't. I'll look in that direction. Thanks again.
Sorry, I've been putting out other fires. Current status is this, the
local admin was a red-herring. On some boxes local admin doesn't have
the problem and on others it does. Disconnecting the PC from the network
does solve it!! But I guess we alread...
Yes, they can resolve fqdns, and they only use DNS from the domain
controller. New wrinkle: When logged into the same machine as local
admin the problem goes away (i.e., Excel launches immediately, how is
the firewall implicated?), but the problem co...