Exchange Public Folder to EXO migration issue

Posted by Rough_Crack@reddit | sysadmin | View on Reddit | 3 comments

Running into a stubborn issue with an Exchange 2016 - Exchange Online Public Folder migration and looking for some sanity checks.

Environment:

Problem:
Test-MigrationServerAvailability -PublicFolder consistently fails with timeout to:
https://mail..com/EWS/mrsproxy.svc

Error:
"The HTTP request to mrsproxy.svc has exceeded the allotted timeout"

So far:

Network team is pushing to whitelist Microsoft 365 IP ranges instead of allowing open 443 access to the VIP. From what I understand, M365 uses dynamic backend IPs and this may not be reliable.

Has anyone successfully locked down PF migration traffic to M365 IP ranges without breaking MRS?
Is SSL inspection known to consistently break MRSProxy (seems likely here)?
Any gotchas specific to FortiGate / reverse proxy setups for this scenario?
Anything else besides firewall that could cause mrsproxy timeouts like this?

Trying to avoid kicking off a multi- day migration only to have it fail mid- stream.

Appreciate any help!!!