I'm struggling with our Network Admin regarding misconfigurations on our firewalls that are causing file download issues. The admin has set rules intended to block executable file types from untrusted websites, but users are either getting a blocking notification for some sites or silently downloading 0-byte files from others. This problem has forced me to use an inconvenient workaround: remotely downloading files to a server in the DMZ and then transferring them over the network.
The Admin seems dismissive, likely because it doesn't directly impact him, and gets defensive when I attempt to discuss the firewall's role in this. I've traced some app failures in Windows 11 to this issue, particularly with the WSAPPX update mechanism being affected by geo-blocks in our firewall settings. I've provided logs showing the blocks and demonstrated that lifting these blocks resolves the problem, but he insists it's a Windows issue that we must fix instead.
I had a meeting with my manager, who understands the technical aspect but seems focused on conflict resolution rather than finding a direct solution. Now, I find myself at a standstill, without the firewall access needed to implement changes. I'm at my wit's end trying to make any headway with our Network Admin, who lacks the troubleshooting skills to collaborate on a fix.
5 Answers
This guy seems a bit too proud about his knowledge. Maybe try rephrasing your approach—say something like, 'I’m not an expert, but I've noticed this issue; can you help clarify?' That might ease the tension and make him more receptive.
It might be worth bringing this issue to someone higher up if the Network Admin continues to deny the problem. You've got solid evidence, and if he's obstinately ignoring it, escalating may be your best option.
Maybe you just need read-only access to the firewall logs? If you can analyze the blocks and document what's happening, it'll support your case better, plus you might discover more solutions along the way. But make sure you don't take on more than your role requires!
But be careful; pushing too hard can increase tension. It's better to let your manager handle this rather than overstepping.
Has your firewall vendor given you a list to allow or block specific URLs? We face similar issues, and adding Microsoft servers to an allow list helped tremendously for us.
Your manager seems to be more worried about interpersonal issues than the tech side of things. It's crucial to keep the pressure on them to ensure the network team handles this appropriately, so suggest suggesting to them that they need to make it a priority with the Admin.
Going over his head could backfire unless you present it the right way. Frame it as a request for help rather than an accusation.