Windows 7 Built-In Firewall Filtering Platform Blocking Outlook.exe Even Though Firewall Off

Question

(this post was originally started here,
http://answers.microsoft.com/en-us/office/forum/office_2010-outlook/windows-7-built-in-firewall-filtering-platform/7312a367-3a9f-470a-b6c7-56c041630af1, but recommended to move to this forum)
I first encountered this problem on a Windows 7 computer running Outlook 2007 a couple of weeks ago. The system kept asking the primary user for a password to connect to our Exchange Service. The user kept typing in the correct password, but it would never
connect. Using Outlook Web Access from the same computer with the same user and password was successful, so the credentials and network connection seemed good.
After checking the Security Logs, I found pairs of Event 5152 and 5157 whenever the user tried to enter a password. Example events are listed below (although they are from the most recent incidence). I found out that the Filtering Platform is supposed to
be part of Windows Firewall, but couldn't find much other information about it. However, the Windows Firewall is turned off by Group Policy (verified by looking in the Control Panel for Window Firewall), so I didn't think it should be blocking anything. Oddly
enough, the Windows Firewall service was running on this computer, but it was running on all computers, even if they didn't have this problem.
I found that I could make the problem go away by stopping the Windows Firewall service. However, it seems odd that would be necessary. It seems a bit of a kludgy fix.
I hoped that the problem would only by on one system and could let it go for a bit. Unfortunately, I just had the problem crop up on a new Windows 7 system with Outlook 2010 installed.
At this point, I'm concerned about what might be causing it and that it might start happening on all our systems. I could stop the Windows Firewall service on all of them, but I'd like to understand what might be happening more before taking that action.
For reference, both systems have received all Automatic Updates and are running the McAfee Total Protection Service anti-virus and firewall services.
Any thoughts or suggestions would be appreciated.
Thanks in advance,
indyvql
Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          3/9/2015 9:05:38 AM
Event ID:      5152
Task Category: Filtering Platform Packet Drop
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      usercomputer.domain.com
Description:
The Windows Filtering Platform has blocked a packet.
Application Information:
 Process ID:  10712
 Application Name: \device\harddiskvolume3\program files\microsoft office\office14\outlook.exe
Network Information:
 Direction:  Outbound
 Source Address:  <IP Address of User Computer>
 Source Port:  55279
 Destination Address: <Unknown IP Address in 192.168 Subnet, Which is Not Used By Us>
 Destination Port:  443
 Protocol:  6
Filter Information:
 Filter Run-Time ID: 67045
 Layer Name:  Connect
 Layer Run-Time ID: 48
Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          3/9/2015 9:05:38 AM
Event ID:      5157
Task Category: Filtering Platform Connection
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      usercomputer.domain.com
Description:
The Windows Filtering Platform has blocked a connection.
Application Information:
 Process ID:  10712
 Application Name: \device\harddiskvolume3\program files\microsoft office\office14\outlook.exe
Network Information:
 Direction:  Outbound
 Source Address:  <IP Address of User Computer>
 Source Port:  55279
 Destination Address: <Unknown IP Address in 192.168 Subnet, Which is Not Used By Us>
 Destination Port:  443
 Protocol:  6
Filter Information:
 Filter Run-Time ID: 67045
 Layer Name:  Connect
 Layer Run-Time ID: 48

Answer 1

Hi indyvql,
"..are running the McAfee Total Protection Service anti-virus and firewall services."
- So you've enabled McAfee firewall? If you have McAfee firewall turned on, then everything is managed by McAfee Personal Firewall which might cause the issue.
To troubleshoot the issue, I would suggest we first disable McAfee temporarily, then try again.
Also, as you've mentioned, please go ahead to have a test with just updating McAfee but not stopping the Windows Firewall service, then verify result.
Regards,
Ethan Hua
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]