Share this page

Xbox app server connectivity on Windows 10 is blocked

If you can’t hear your friends online, or you can’t join or host an Xbox Live multiplayer game, go to Settings > Network in the Xbox app and check Server connectivity.

If it says Blocked, your PC was unable to establish a Teredo IPsec connection to the Quality of Service (QoS) server. If you also see Teredo is unable to qualify next to NAT type, visit the Teredo troubleshooting page first to resolve that issue. Then check to see if Server connectivity no longer shows Blocked.

Failure to establish a Teredo IPsec connection to the QoS server can occur when the Windows Firewall is disabled, when security software has altered the Windows Firewall configuration, or when required Windows services have been disabled or stopped. When your PC can’t establish a Teredo IPsec connection, you’ll be unable to use Xbox Live party chat service or do multiplayer gaming on Xbox Live.

Note Teredo IPsec connectivity is only necessary for Xbox Live party chat and multiplayer features. If your game doesn’t use the Xbox Live service, consult that game’s support site for help on chat and multiplayer issues.

Solutions

Try the following solutions in order. Move on to the next one only if the previous one didn’t resolve the issue.

Solution 1: Make sure you have an Internet connection

  1. On your PC, launch the Xbox app.
  2. Select Settings > Network.
  3. Under Network status, make sure Internet connection says Connected.

If you don’t have an Internet connection, you’ll have to fix that before continuing with any additional troubleshooting.

Solution 2: Make sure Windows Firewall is enabled and that the default policy is active

Windows Firewall is required to establish a Teredo IPsec connection. Even if you use additional security software and firewalls, most of these will use Windows Firewall as a base. If for some reason your Windows Firewall has been disabled, you’ll have to enable it in order to use Xbox Live party chat and do multiplayer gaming.

To see if Windows Firewall is enabled:

  1. Enter Windows Firewall in the search field on your toolbar (Cortana).
  2. Select Windows Firewall from the search results.
  3. On the left side of the window, select Turn Windows Firewall on or off.
  4. If Turn off Windows Firewall is selected for your network type (public, private, or domain), select Turn on Windows Firewall, and then select OK.

You may need to restart your PC.

To see if the Windows Firewall default policy is enabled:

  1. Right-click the Start icon, and then select Command Prompt (Admin).
  2. Run the following command from the Admin command prompt:

    netsh advfirewall show currentprofile

    If the following output is present, the default policy is active:

    Firewall Policy     BlockInbound,AllowOutbound

  3. If the Inbound Policy is set to AllowInbound, Teredo will be unable to establish an IPsec connection to other PCs or Xbox One consoles. To reset the firewall policy to the default, run the following command from the Admin command prompt:

    netsh advfirewall set currentprofile firewallpolicy blockinbound,allowoutbound

Solution 3: See if you’re using one of the following security software programs

In some cases, the security software programs listed below have been found to interrupt a PC’s ability to establish Teredo IPsec connections. If you have one of these security programs on your PC, make sure you’ve updated the software to the latest version, or see the program’s support documentation to determine how to enable Teredo IPsec connectivity with their software.

Solution 4: See if the Windows services required for Xbox Live party chat and multiplayer gaming have been changed from their default values

Four key services are required for Xbox Live party chat and multiplayer gaming to function on Windows 10. If any of these services have been disabled, you’ll need to re-enable them.

To see if the required Windows services are enabled:

  1. Enter Services in the search field on your toolbar (Cortana).
  2. Select Services from the search results.
  3. Check the Startup Type for the following services to ensure they’re set to their default values:
Service Name Default Startup Type
IKE and AuthIP IPsec Keying Modules Automatic (Trigger Start)
IP Helper Automatic
Xbox Live Auth Manager Manual
Xbox Live Networking Service Manual

If any of the services have been altered from their default values, you can set them back to their default values:

  1. In the Services application, double-click the service name that’s been changed.
  2. In the Properties window, select the default value from the Startup type drop-down list.
  3. Under Service Status, select Start.
  4. Select OK to save the changes.

Some applications reconfigure PC settings to try to optimize performance and will disable Windows services in the process, sometimes affecting one or more of the four services listed above. If you use one of these PC optimization applications, make note of any service configuration changes it makes, as you may need to revert those settings to use Xbox Live party chat and multiplayer gaming.

Was this article helpful?

Yes
No

Thank you for your feedback

Thanks for your feedback!

We're sorry this article didn't solve your problem. We won't give up and neither should you. Try this community option, below.
Get help from the community
Ambassador chat image
Ambassador chat
Chat one on one with a fellow Xbox User who wants to help.

Provide feedback for this topic

255 characters remain.
To protect your privacy, please do not include contact information in your feedback.
Get help from the community
Ambassador chat image
Ambassador chat
Chat one on one with a fellow Xbox User who wants to help.

Contact Us

Virtual Agent
Hi, I’m Microsoft’s virtual support agent. I can help you with your question.
Share this page