5000HX 5.1 Email Gateway to O365

[MrNitch]

Does anyone know if version 5.1 is able to send to O365 servers directly? As of the 14th of this month all 4 that I manage have stopped forwarding and I am thinking Microsoft deprecated some TLS or some other security protocols that the PBX is using to send the voicemails via SMTP. A sample of our email log is below.


Apr 19 12:30:10 Mitel5000 exim[28426]: 1lYXXW-0008Pk-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.46.36] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 12:30:10 Mitel5000 exim[28426]: 1lYXXW-0008Pk-00 failure while setting up TLS session
Apr 19 12:30:10 Mitel5000 exim[28426]: 1lYXXW-0008Pk-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.73.138] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 12:30:10 Mitel5000 exim[28426]: 1lYXXW-0008Pk-00 failure while setting up TLS session
Apr 19 12:30:10 Mitel5000 exim[28426]: 1lYXXW-0008Pk-00 == facome@centuryac.com T=remote_smtp defer (-38): failure while setting up TLS session
Apr 19 13:00:10 Mitel5000 exim[3594]: 1lYXXW-0008Pk-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.73.10] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 13:00:10 Mitel5000 exim[3594]: 1lYXXW-0008Pk-00 failure while setting up TLS session
Apr 19 13:00:10 Mitel5000 exim[3594]: 1lYXXW-0008Pk-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.74.10] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 13:00:10 Mitel5000 exim[3594]: 1lYXXW-0008Pk-00 failure while setting up TLS session
Apr 19 13:00:10 Mitel5000 exim[3594]: 1lYXXW-0008Pk-00 == facome@centuryac.com T=remote_smtp defer (-38): failure while setting up TLS session
Apr 19 13:30:10 Mitel5000 exim[11229]: 1lYXXW-0008Pk-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.44.36] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 13:30:10 Mitel5000 exim[11229]: 1lYXXW-0008Pk-00 failure while setting up TLS session
Apr 19 13:30:10 Mitel5000 exim[11229]: 1lYXXW-0008Pk-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.74.10] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 13:30:10 Mitel5000 exim[11229]: 1lYXXW-0008Pk-00 failure while setting up TLS session
Apr 19 13:30:10 Mitel5000 exim[11229]: 1lYXXW-0008Pk-00 == email@mydomain.com T=remote_smtp defer (-38): failure while setting up TLS session
Apr 19 13:30:10 Mitel5000 exim[11229]: 1lYXXW-0008Pk-00 ** email@mydomain.com: retry timeout exceeded
Apr 19 13:30:10 Mitel5000 exim[11229]: 1lYXXW-0008Pk-00 Process failed (69) when writing error message to visualmail@mydomain.com
Apr 19 13:30:10 Mitel5000 exim[11229]: 1lYXXW-0008Pk-00 Completed
Apr 19 14:29:28 Mitel5000 exim[24679]: 1lYZaI-0006Q3-00 <= visualmail@mydomain.com U=root P=local S=226218 T="[0:21] Message for MB 11262 from a caller at (333) 333-9302"
Apr 19 14:29:29 Mitel5000 exim[24774]: 1lYZaI-0006Q3-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.73.138] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 14:29:29 Mitel5000 exim[24774]: 1lYZaI-0006Q3-00 failure while setting up TLS session
Apr 19 14:29:29 Mitel5000 exim[24774]: 1lYZaI-0006Q3-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.46.36] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 14:29:29 Mitel5000 exim[24774]: 1lYZaI-0006Q3-00 failure while setting up TLS session
Apr 19 14:29:29 Mitel5000 exim[24774]: 1lYZaI-0006Q3-00 == email@mydomain.com T=remote_smtp defer (-38): failure while setting up TLS session
Apr 19 14:30:10 Mitel5000 exim[26475]: 1lYZaI-0006Q3-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.73.138] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 14:30:10 Mitel5000 exim[26475]: 1lYZaI-0006Q3-00 failure while setting up TLS session
Apr 19 14:30:11 Mitel5000 exim[26475]: 1lYZaI-0006Q3-00 TLS error on connection to mydomain.mail.protection.outlook.com [104.47.73.10] (SSL_connect): error:00000000:lib(0):func(0):reason(0)
Apr 19 14:30:11 Mitel5000 exim[26475]: 1lYZaI-0006Q3-00 failure while setting up TLS session
Apr 19 14:30:11 Mitel5000 exim[26475]: 1lYZaI-0006Q3-00 == email@mydomain.com T=remote_smtp defer (-38): failure while setting up TLS session


Thank you
Kenny

[Tech Electronics]

MrNitch,

As you can see in your logs it is getting rejected to a TLS error. The new security put in place by outlook.com is supposed to stop people from using the old TLS versions [1.0 and 1.1]. You will probably have to upgrade the system from 5.1 to the latest 6.3 to get the latest support for TLS on the MiVO-250. In previous versions of 6.x the updated the TLS used by the system to 1.2 I believe.

According to a Mitel Information Post there is supposed to be a new release of 6.3 SP6 at the end of this month that includes a new version of Exim (e-mail server) used in the MiVO-250.

Thanks,

TE

[MrNitch]

Thank you!

[ebarrette]

Hello,
I have upgraded version 6.3.8.99 (6.3 SP4) in 2020 and O365 is still reporting that the voicemails are using TLS 1.0 in the TLS report in the Mail Flow dashboard of the Security Admin Center.
As of now, Microsoft appears to be letting mine through, but that may not last.
Does anyone have any advice or experience with this or know if SP5 or 6 fixes this issue?

Thank you,
Eric

[Tech Electronics]

ebarrette,

MIVO250 system and TLS 1.2 compatibility
CAUSE: Changes to removing TLS 1.0 and 1.1 and using TLS 1.2

Email compatibility with TLS 1.2
TLS 1.2  for SMTP email is fixed in 6.2 SP2 PR6 or higher software. So a system on a lower version will need to upgrade to be compatible going forward with TLS 1.2

System and System Admin and Diagnostics with TLS 1.2
For systems and Windows 10, Systems Administration and Diagnostics 6.3 and above will also have all the TLS 1.2 support in those versions. An example is you have a 6.1 system or lower version customer upgrades PC to Windows 10, SysAd not working correctly. They need to upgrade the system to 6.3 and higher and the latest SysAd to get compatibility with TLS 1.2

Thanks,

TE

[ebarrette]

Thank you for your reply TE, but I am not sure what you're saying.
I have upgraded the system itself and DB programming to 6.3 SP4.  What other steps need to be done in order to use TLS 1.2?

[Tech Electronics]

ebarratte,

There are no other steps as it will use TLS 1.2 when required by the server. If the server supports one of the other two versions of TLS it will use those.

Thanks,

TE

[dhumes0524]

We are running into this same issue now.  Just noticed that about 10 days ago our O365 SMTP relays fail and in the maillog on our 5000 controller it says TLS 1.0 and TLS 1.1 not supported and to connect using TLS 1.2.  We have been on 6.3 SP4 for at least 6 months now if not longer and all was working well until around January 21st 2022 or so.