Microsoft Authetnicator Issue

Follow

Jeff Hall

• April 18, 2025 12:22
• Edited

I have a number of MFA authenticators, but when I implemented my Firewalla Gold Plus I noticed that push requests to my Pixel phone would hang when I responded to them. If I am on the cellular network, everything works as expected. But when I am on my home network, I get the push, I key in the two digit number and the MS Authenticator app just spins endlessly. The workaround is to tell the authentication request to use the six digit code from MS Authenticator. Is there some rule or other setting I can change to stop this behavior?

FYI I am a networking professional, so please do not give me all of the easy stuff like updating the software on all devices as they are current. I've used Wireshark to capture the packets involved and as near as I can tell the message back to MS Authenticator asking to approve the logon request either never gets to Microsoft or the ACK back never gets back to the mobile app. Which seems odd given the rest of the traffic works up to that point. So that leaves me with the Firewalla blocking something inbound.

0

• 

  Firewalla

  • April 18, 2025 15:15

  Tap on devices, tap on your phone, turn on emergency mode. If this resolves the problem, you may have a rule that's blocking. If this does not resolve problem, make sure you are not using any blocking DNS; if you are using normal DNS, then the issue likely somewhere else. 

  1

  Comment actions Permalink
• 

  Andy Martinez

  • July 02, 2025 16:03

  I am also having this issue, Emergency Access doesn't work. I have to get off my Wi-Fi in order to accept the MFA prompts. The prompts come, but I cannot approve them it just hangs. I don't see anything in blocked flows. I also don't have ad block on, I'm using normal DNS, very strange.

  0

  Comment actions Permalink
• 

  Firewalla

  • July 02, 2025 16:16

  If emergency access doesn't work, and you are not using any fancy blocking DNS, and not using VPN, then the problem is highly unlikely to be related to the Firewalla.

  Do try to turn off ipv6 if you have it, or reboot your modem and see if it can get a new IP, both of these are related to your ISP, not firewalla. 

  0

  Comment actions Permalink
• 

  Andy Martinez

  • July 02, 2025 16:58

  I highly doubt it's my ISP, this only started since the installation of my Firewalla two weeks ago. not a coincidence. I have also have a static IP through ATT Fiber, and I have restarted ISP modem, and Firewalla in sequence with no success on the MFA issue. Thanks for the ipv6 suggestion, I will try that. 

  0

  Comment actions Permalink
• 

  Andy Martinez

  • July 02, 2025 17:06

  Update: it was indeed IPv6. Turned off and accepting Auth is working now.

  Jeff Hall, in case you're still dealing with this. this was the fix for me.

  0

  Comment actions Permalink
• 

  Firewalla

  • July 02, 2025 18:00

  Andy, I just created a case and feel free to share support access with us, want to confirm the issue is your ISP. 

  0

  Comment actions Permalink

Please sign in to leave a comment.