> Source: [sk165354](https://support.checkpoint.com/results/sk/sk165354)

# sk165354 - Mobile Access Blade fails to browse to Office365's Web site

| Property | Value |
|----------|-------|
| Solution ID | sk165354 |
| Date Created | 2020-03-08 |
| Last Modified | 2022-11-23 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- Mobile Access Blade fails to browse to Office365's Web site.

## Cause

Office365 is a cloud service. Consequently, Mobile Access Blade requires a special configuration in order to become compatible with Office365's Web site.

<br />

## Solution

This problem was fixed. The fix is included in:  

* [Check Point R81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166715)
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456) starting from Take 215
* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) starting from Take 53

<br />

To make this work, perform the below steps:  

1. On the Security Management, configure Hostname Translation (HT) cookies to be on the endpoint machine:  
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk165354/HT_Cookies_on_Endpoint20200220151921.png)
2. From the GuiDBedit, add the following sites to the 'connectra_global_properties' table, in the container named: 'hostname_translation_properties -\> hostnames_not_to_translate':  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk165354/Office365_HT20200303141000.png)  

   For your convenience they are listed here in text format:  
   `blob.officehome.msocdn.com`  
   `aadcdn.msftauth.net`  
   `aadcdn.msauth.net`  
   `browser.pipe.aria.microsoft.com`  
   `www.microsoft.com`  

3. **For R80.10 and R80.20** - [contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a specials Hotfix (multiple URLs in POST body + case insensitive untranslation) and install it on the Security Gateway.  

4. Backup and edit the *$CVPNDIR/conf/httpd.conf* file to change the following limit values from 8190 to 16384:  

   ```
   LimitRequestFieldSize 16384
   LimitRequestLine 16384
   ```

5. If the above still fails, backup and edit the *$CVPNDIR/conf/includes/HT.virtualhost.conf* file to comment out a line and add another as shown below:  

   ```
   #Header always append X-Frame-Options SAMEORIGIN
   CvpnResHeaderThrow X-Frame-Options
   ```

6. Install the Security policy. If already installed, type '*cvpnd_admin policy*'.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content