Authentication failed because the remote party has closed the transport stream

Has anyone else ran into this error recently with Service connect when trying to read emails from an O365 mailbox. i believe it has to do with service connect only using TLS 1.1

Hi

What is the version of Service Connect that you are using?

9.05.702 on windows server 2008 R2.

Hi Will,

I see.

I do not think versions of SC prior to 10.2.100 had support of TLS 1.2 in SMTP mailing enabled.

While I am looking for whether it is possible to force TLS1.2 through some configuration options in SC/Windows, you may wish to try the legacy SMTP endpoint of Office 365.

Note that for the legacy endpoint to work, it has to be enabled in Office 365 configuration, as the above blog post details.

Thanks Alexander,

I’ve been able to use a defunct mail server to send outbound traffic. my input channel is my biggest concern now.

Hi Will,

Glad you were able to get past SMTP part.

I did not find (yet?) a way to enable TLS 1.2 through configuration for versions of SC that did not have TLS 1.2 for mailing enabled (and MS does not appear to have a legacy endpoint for IMAP/POP3 as they do for SMTP.

I am back up and running. but i cant answer why as i tried a few things. One was using powershell to create an authentication policy that allowed legacy POP, IMAP, and SMTP and applying it to the account. That didnt work immediately, but with powershell there is typically a delay. or Microsoft started allowing TLS 1.1 again.

i will update when i determine if my solution was actually what worked.

I haven’t found proof that microsoft went back on their TLS throttling so i feel confident in saying that my solution worked. for others having issues i did the following.

open a powershell session with your o365 exchange server

New-AuthenticationPolicy -Name “Epicor” -AllowBasicAuthPop
Get-AuthenticationPolicy /* Checking your work here, you should see a policy now named epicor*/
Set-User -Identity {your email account you use} -AuthenticationPolicy “Epicor” /this applies the policy above to your account, you can apply it to multiple accounts if you like/

id wait about 24 hrs for the policies and permissions to all sync up and take effect.

1 Like