Xbox Live server connectivity on Windows 10 is blocked
If you can’t hear your friends online, or you can’t join or host an Xbox Live multiplayer game, in Windows go to Settings > Gaming > Xbox Network and check Server connectivity.
If it says Blocked, your PC was unable to establish a Teredo IPsec connection to the Quality of Service (QoS) server. If you also see Teredo is unable to qualify next to NAT type, visit the Teredo troubleshooting page first to resolve that issue. Then check to see if Server connectivity no longer shows Blocked.
Failure to establish a Teredo IPsec connection to the QoS server can occur when the Windows Firewall is disabled, when security software has altered the Windows Firewall configuration, or when required Windows services have been disabled or stopped. When your PC can’t establish a Teredo IPsec connection, you’ll be unable to use Xbox Live party chat service or do multiplayer gaming on Xbox Live.
Note Teredo IPsec connectivity is only necessary for Xbox Live party chat and multiplayer features. If your game doesn’t use the Xbox Live service, consult that game’s support site for help on chat and multiplayer issues.
Try the following solutions in order. Move on to the next one only if the previous one didn’t resolve the issue.
Solution 1: Make sure you have an Internet connection
- Press the Windows button on your device or keyboard, or you can select the Windows icon in the lower-left corner of the main screen.
- Select Settings > Gaming, and then select Xbox Networking.
- Under Xbox Live multiplayer, make sure Internet connection says Connected.
If you don’t have an Internet connection, you’ll have to fix that before continuing with any additional troubleshooting.
Solution 2: Make sure Windows Firewall is enabled and that the default policy is active
Windows Firewall is required to establish a Teredo IPsec connection. Even if you use additional security software and firewalls, most of these will use Windows Firewall as a base. If for some reason your Windows Firewall has been disabled, you’ll have to enable it in order to use Xbox Live party chat and do multiplayer gaming.
To see if Windows Firewall is enabled:
- Enter Windows Firewall in the search field on your toolbar (Cortana).
- Select Windows Firewall from the search results.
- On the left side of the window, select Turn Windows Firewall on or off.
- If Turn off Windows Firewall is selected for your network type (public, private, or domain), select Turn on Windows Firewall, and then select OK.
You may need to restart your PC.
To see if the Windows Firewall default policy is enabled:
- Right-click the Start icon, and then select Command Prompt (Admin).
- Run the following command from the Admin command prompt:
netsh advfirewall show currentprofile
If the following output is present, the default policy is active:
Firewall Policy BlockInbound,AllowOutbound
- If the Inbound Policy is set to AllowInbound, Teredo will be unable to establish an IPsec connection to other PCs or Xbox One consoles. To reset the firewall policy to the default, run the following command from the Admin command prompt:
netsh advfirewall set currentprofile firewallpolicy blockinbound,allowoutbound
Solution 3: See if you’re using one of the following security software programs
In some cases, the security software programs listed below have been found to interrupt a PC’s ability to establish Teredo IPsec connections. If you have one of these security programs on your PC, make sure you’ve updated the software to the latest version, or see the program’s support documentation to determine how to enable Teredo IPsec connectivity with their software.
- Bit Defender Internet Security: Update to the latest version, or visit http://www.bitdefender.com/support/.
- AVG Internet Security: Update to the latest version, or visit https://support.avg.com/.
- Panda Internet Security 2015 and 2016: Update to the latest version, or visit http://www.pandasecurity.com/usa/homeusers/support/.
Solution 4: See if the Windows services required for Xbox Live party chat and multiplayer gaming have been changed from their default values
Four key services are required for Xbox Live party chat and multiplayer gaming to function on Windows 10. If any of these services have been disabled, you’ll need to re-enable them.
To see if the required Windows services are enabled:
- Enter Services in the search field on your toolbar (Cortana).
- Select Services from the search results.
- Check the Startup Type for the following services to ensure they’re set to their default values:
|Service Name||Default Startup Type|
|IKE and AuthIP IPsec Keying Modules||Automatic (Trigger Start)|
|Xbox Live Auth Manager||Manual|
|Xbox Live Networking Service||Manual|
If any of the services have been altered from their default values, you can set them back to their default values:
- In the Services application, double-click the service name that’s been changed.
- In the Properties window, select the default value from the Startup type drop-down list.
- Under Service Status, select Start.
- Select OK to save the changes.
Some applications reconfigure PC settings to try to optimize performance and will disable Windows services in the process, sometimes affecting one or more of the four services listed above. If you use one of these PC optimization applications, make note of any service configuration changes it makes, as you may need to revert those settings to use Xbox Live party chat and multiplayer gaming.
Solution 5: See if your PC’s date or time setting is incorrect
Your PC will need to have an accurate date and time value to be able to establish a Teredo IPsec connection. The simplest way to ensure that your system has an accurate date and time value is to use the Set time automatically feature.
- On your PC, press the Start button, then select Settings.
- Select Time & Language > Date & time.
- Under Set time automatically, make sure the button is set to On.
Solution 6: See if your PC has a firewall rule blocking Teredo network connectivity
Some VPN client software will create a Windows Firewall rule that will block Teredo connections until the rule is removed or disabled, and this rule isn’t always deleted when VPN software is uninstalled.
To check if this rule is set on your PC, and disable it:
- Right-click the Start button, and then select Command Prompt (Admin).
- Run the following command from the Admin command prompt:
netsh advfirewall firewall show rule 4jxr4b3r3du76ina39a98x8k2
If you get the following message, the firewall rule is not on your PC:
No rules match the specified criteria.
- If you see a different message showing that the firewall rule is present, run the following command from the Admin command prompt:
netsh advfirewall firewall set rule name="4jxr4b3r3du76ina39a98x8k2" new enable=no
To provide better support, did this solution solve your problem?
Thank you for your feedback
Thanks for your feedback!
Provide feedback for this topic
Would you like to contact Support regarding the "Xbox Live server connectivity on Windows 10 is blocked" issue you were reading about or a different issue?