Skip navigation
Iain_M
Currently Being Moderated

Cloud with Proxies - Proof and solution

Jul 1, 2012 6:40 PM

Tags: #license #proxy #activation #cloud #application_manager #pdapp

Hi all,

 

I've struggled with this issue for a while, and read many similar posts from those having the same issue. I have found a solution that worked for me and hopefully others.

 

Essentially, although the Application Manager and other utilities appear to function properly inside a corporate network, the "phone home" services fail to connect, and leave you with an "expired subscription" or various messages similar to "You're not connected to the internet" and so on.

 

Adobe adamantly states that the software is "Proxy-aware" so there must be other unresolvable issues, and you should kindly ask your IT team to deactivate firewalls, proxies, virus-protection, etc... (yea, right...). You could also request adding exceptions to 6 or so activation servers on a range of ports, which still doesn't work, and take 6 months and 5 levels of management approval.

 

In reality, "proxy-aware" is only partly accurate, as shown in the graphic below. I monitored PDApp.exe (Adobe Application Manager) with the ProcessExplorer tool (Windows, sysinternals) while doing several network-active tasks to see where the traffic was being routed.

PDApp connection issue.jpg

So, PDApp.exe gets correctly routed via my proxy server for installing apps, running updates, and logging in to the app when opening it up.

However, when getting "Subscription Expired" and "Unable to connect to the internet" and clicking "Try Again" or "Licence this Software", the proxy is ignored and the app attempts to connect directly to ims-na1.adobelogin.com, which fails.

 

The worst part of this was I went through the 5 levels of management approval and so on to get the two servers Adobe states you need access to for Cloud added as exceptions to our firewall(https://activate.adobe.com and https://lm.licenses.adobe.com/, on ports 23, 80 and 443), and still got nowhere, because without ims-na1.adobelogin.com, you can't proceed past the screen above.

 

Now, for my solution:

I searched for software that would force a program to use a specific proxy. I came across lots, I have to experience with these so I can't vouch for any particular one, but I chose "Proxifier". (They have one that doesn't require an installer for those who don't have local admin rights.) This one is a trial, I'm sure there are free ones as well, just search a bit more.

 

The proxy server address can be deduced from watching working software traffic in Process Explorer (right click on "Internet Explorer" and got to properties, then TCP/IP, I could see the proxy being addressed under "Remote address", as see in the graphics above). Alternatively just ask your IT team.

 

I won't get into how to set up the software, read it's help files; what you want is to take any communications from PDApp.exe that are NOT already destined to your proxy server's address and send them to your proxy server's address. (this is important - some communications from PDApp are proxy-aware and redirecting them will cause them to fail)

 

Hopefully this helps a few people. Despite the issues I love Adobe's software, and am happy I am using it again.

Branched to a new discussion.
 
Replies
  • Currently Being Moderated
    Jul 2, 2012 12:54 PM   in reply to Iain_M

    Thank you Lain_M for this information.  I have forwarded on this thread.  Do you have any details regarding the configuration of the proxy server utilized by your company?

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 11, 2013 2:00 AM   in reply to Jeff A Wright

    Hi Jeff,

     

    Was this ever resolved?  We're having the same problem.  I've packaged up Photoshop using the CCP tool, I can deploy it fine (although to package it I had to connect the CCP machine to an ADSL connection), but when I launch the app and click the "License this Software" button, I get a "Internet connction required for subscriptions" message.  We use a Webmarshal proxy, set in internet explorer.

     

    Thanks!

    Nick.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 11, 2013 9:01 AM   in reply to nickfletcher123

    Nick we actually have improved handling for proxy servers which will be released on June 17th.  You will actually be able to enter the proxy information into the Creative Cloud application.

     

    I would also recommend reviewing the Adobe Creative Cloud Service Access Documentation for IT section of http://www.adobe.com/devnet/creativesuite/enterprisedeployment.html.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 18, 2013 6:13 PM   in reply to Jeff A Wright

    Hi Jeff,

    I just re-downloaded the CCPLauncher.exe app and it looks exactly the same version, is there a revised date for when this proxy aware version will be released?

     

    Thanks.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 19, 2013 11:09 AM   in reply to nickfletcher123

    Your correct Nick.  This feature looks like it will be offered in a future version of Creative Cloud.  I do not see the option I was referring to in the current released version.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 19, 2013 8:16 PM   in reply to Jeff A Wright

    Hi Jeff. We have subscribed to Creative Cloud for a few users and cannot licence our installations. We get the same errors described by Ian_M and our Corporate proxy guys are seeing the same behaviours that he described when the CS6 Apps try to connect for licencing. Has anything been done by Adobe to resolve this?. The updated CCP tool would help with intial packaging but probably will not resolve the periodic checking by the App to ensure the CC subscriptions are still valid as I suspect the application will still fail to connect.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 19, 2013 11:34 PM   in reply to Jeff A Wright

    OK thanks Jeff.

    I can't believe Adobe would release an enterprise packager that cannot work in 99% of enterprises?

    Is there anything aside from posting here that I can do to speed up the release of the proxy aware version?  Your answer was suitably vague such that I assume you're not sure of its release time yourself..?

     

    Thanks,

    Nick.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 20, 2013 8:25 AM   in reply to nickfletcher123

    Nick the software is already proxy aware.  If you are using Windows then please place the proxy configuration in the Internet Options control panel.  If you are using Mac OS then you will want to enter the proxy information into the Network preference pane.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 20, 2013 8:26 AM   in reply to steelkiwi

    Steelkiwi have you asked your corporate proxy guys to review the Adobe Creative Cloud Service Access Documentation for IT section of the Creative Suite Enterprise Deployment page as offered in message #4?

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 20, 2013 5:26 PM   in reply to Jeff A Wright

    Hi Jeff,

    I'm afraid the software is NOT proxy aware, or, at least some parts of it are not.  You can see this proved in the first post in this thread - the PDApp.exe application tries to connect directly to the internet for certain tasks rather than through the proxy.  I have proved the same thing in my environment, except it's trying to access "http://www-da1.adobe.com" directly for me.

     

    Can I open a support ticket or something to get this escalated?

     

    Thanks,

    Nick.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 20, 2013 5:53 PM   in reply to Jeff A Wright

    I have to agree with the other guys here. I placed a temporary Proxy "permit all" bypass for a user. I can see browsing through the proxy. However, when it comes to licensing, I can see 192.150.16.64 (192.150.16.0/24 is Adobe address space) on port80 going DIRECT into the Enterprise network rather than using the IE proxy setting. Hope this helps you locate which part of the software is failing to abide by the proxy setting.

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 20, 2013 7:49 PM   in reply to Jeff A Wright

    Yes. They have reviewed the document and confirmed that there is nothing blocking access to any of the hosts listed. They advised me that if the Adobe Apps were using the proxy correctly then they don't need to make any changes as our current set of Proxy rules allow the required access. They put in a temporary set of rules to permit all for testing and found that traffic to 192.150.16.64 (192.150.16.0/24 is Adobe address space) on port80 was not using IE proxy settings.

     

    Cheers

     
    |
    Mark as:
  • Currently Being Moderated
    Jun 21, 2013 7:58 AM   in reply to nickfletcher123

    Certainly Nick you are more than welcome to contact our support team and open a ticket.  You can contact our chat support at http://adobe.ly/yxj0t6.  You are certainly welcome to point the support agent to this discussion.

     

    Please ensure that you are entering the proxy information into the Internet Options control panel or Network preference pane depending on your Operating System.  This will likely be one of the first steps you are requested to make.

     
    |
    Mark as:
  • Currently Being Moderated
    Aug 18, 2013 1:58 PM   in reply to Jeff A Wright

    Hi Jeff. Thought I'd update you on this issue. After working with Adobe support for over a month they finally advised me that there is a problem with their software which is preventing Creative Cloud apps connecting to the required Adobe sites through a Proxy server. The apps don't use the proxy. They try and connect directly. This means that a path must be allowed through the Enterprise Firewall. This itself can be a problem as Adobe cannot provide a list of IP addresses for all of the required Adobe servers. Only hosts names. Enterprise firewalls have rules based on IP's not names so this makes setting up the rules difficult. Adobe support advised me that there will be an upgrade to resolve this but did not give a time frame.

     
    |
    Mark as:
  • Currently Being Moderated
    Aug 18, 2013 2:10 PM   in reply to steelkiwi

    Steelkiwi just to confirm your I.T. department has reviewed http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/c reativesuite/pdfs/ServiceAndSiteURL_List.pdf?

     

    It seems an interesting limitation that the firewall can't be configured to work with a DNS sever to resolve the current real world IP address of the server.  Could this information be done manually by pinging the appropriate addresses or some other similar method to resolve the IP address?

     
    |
    Mark as:
  • Currently Being Moderated
    Aug 18, 2013 6:48 PM   in reply to steelkiwi

    Something from me - I worked with Adobe support for a while on this issue, there has recently (in the last few weeks) been an update to the adobe software, and it works better now, but not perfectly.

    For me, I can now connect fine and use the creative cloud applications through our proxy, but I still cannot use the creative cloud packager.  So for packaging, I have to connect the PC to our ADSL line which as no firewall, and it works fine.  Once packaged, I can successfully launch the application on our network through our proxy.

    A step in the right direction, and enough for us to start actually using CC apps in the business, but still not 100%.  better than nothing, though!

     
    |
    Mark as:
  • Currently Being Moderated
    Dec 10, 2013 6:34 AM   in reply to Jeff A Wright

    Has a permanent solution to this very annoying issue ever been found?
    I just checked it , the same way the 1st post in this discussion checked it - and its still the same issue

    The registration tries to connect to the internet WITHOUT ever asking the proxy server.

     

    Why is this such a big deal to fix?

     
    |
    Mark as:
  • Currently Being Moderated
    Dec 10, 2013 8:32 AM   in reply to Munk

    Munk to avoid duplication I would recommend that you review the entirety of the discussion.  In particular please make sure your I.T. department have reviewed the documentation referenced in message #4.  They also will want to ensure that they are entering the information into the appropriate location for the operating system.

     
    |
    Mark as:
  • Currently Being Moderated
    Jan 23, 2014 4:35 PM   in reply to nickfletcher123

    Unfortunately i was wrong previously.  We recently had a requirement for a creative cloud app, and i mustn't have tested it properly last time - i packaged the application up, but when I try and go through to the licensing part, the PDApp.exe process again tries to access the internet directly.  Strangely, while PDApp.exe is logging me in to my adobe account, it uses the proxy, but when you click the "License this software" button, it ignores the proxy and tries to connect directly.

     

    So, this is still not working in our environment.

     
    |
    Mark as:

More Like This

  • Retrieving data ...

Bookmarked By (0)