If you can’t hear your friends online, or you can’t join or host an Xbox Live multiplayer game, go to Settings > Network in the Xbox app and check Server connectivity.
If it says Blocked, your PC was unable to establish a Teredo IPsec connection to the Quality of Service (QoS) server. If you also see Teredo is unable to qualify next to NAT type, visit the Teredo troubleshooting page first to resolve that issue. Then check to see if Server connectivity no longer shows Blocked.
Failure to establish a Teredo IPsec connection to the QoS server can occur when the Windows Firewall is disabled, when security software has altered the Windows Firewall configuration, or when required Windows services have been disabled or stopped. When your PC can’t establish a Teredo IPsec connection, you’ll be unable to use Xbox Live party chat service or do multiplayer gaming on Xbox Live.
Note Teredo IPsec connectivity is only necessary for Xbox Live party chat and multiplayer features. If your game doesn’t use the Xbox Live service, consult that game’s support site for help on chat and multiplayer issues.
Try the following solutions in order. Move on to the next one only if the previous one didn’t resolve the issue.
Solution 1: Make sure you have an Internet connection
If you don’t have an Internet connection, you’ll have to fix that before continuing with any additional troubleshooting.
Solution 2: Make sure Windows Firewall is enabled and that the default policy is active
Windows Firewall is required to establish a Teredo IPsec connection. Even if you use additional security software and firewalls, most of these will use Windows Firewall as a base. If for some reason your Windows Firewall has been disabled, you’ll have to enable it in order to use Xbox Live party chat and do multiplayer gaming.
To see if Windows Firewall is enabled:
You may need to restart your PC.
To see if the Windows Firewall default policy is enabled:
netsh advfirewall show currentprofile
If the following output is present, the default policy is active:
Firewall Policy BlockInbound,AllowOutbound
netsh advfirewall set currentprofile firewallpolicy blockinbound,allowoutbound
Solution 3: See if you’re using one of the following security software programs
In some cases, the security software programs listed below have been found to interrupt a PC’s ability to establish Teredo IPsec connections. If you have one of these security programs on your PC, make sure you’ve updated the software to the latest version, or see the program’s support documentation to determine how to enable Teredo IPsec connectivity with their software.
Solution 4: See if the Windows services required for Xbox Live party chat and multiplayer gaming have been changed from their default values
Four key services are required for Xbox Live party chat and multiplayer gaming to function on Windows 10. If any of these services have been disabled, you’ll need to re-enable them.
To see if the required Windows services are enabled:
|Service Name||Default Startup Type|
|IKE and AuthIP IPsec Keying Modules||Automatic (Trigger Start)|
|Xbox Live Auth Manager||Manual|
|Xbox Live Networking Service||Manual|
If any of the services have been altered from their default values, you can set them back to their default values:
Some applications reconfigure PC settings to try to optimize performance and will disable Windows services in the process, sometimes affecting one or more of the four services listed above. If you use one of these PC optimization applications, make note of any service configuration changes it makes, as you may need to revert those settings to use Xbox Live party chat and multiplayer gaming.
Solution 5: See if your PC’s date or time setting is incorrect
Your PC will need to have an accurate date and time value to be able to establish a Teredo IPsec connection. The simplest way to ensure that your system has an accurate date and time value is to use the Set time automatically feature.
Solution 6: See if your PC has a firewall rule blocking Teredo network connectivity
Some VPN client software will create a Windows Firewall rule that will block Teredo connections until the rule is removed or disabled, and this rule isn’t always deleted when VPN software is uninstalled.
To check if this rule is set on your PC, and disable it:
netsh advfirewall firewall show rule 4jxr4b3r3du76ina39a98x8k2
If you get the following message, the firewall rule is not on your PC:
No rules match the specified criteria.
netsh advfirewall firewall set rule name="4jxr4b3r3du76ina39a98x8k2" new enable=no
Thanks for your feedback!
Provide feedback for this topic
Would you like to contact Support regarding the "Xbox app server connectivity on Windows 10 is blocked" issue you were reading about or a different issue?