Xbox app server connectivity on Windows 10 is blocked
If you can’t hear your friends online, or you can’t join or host an Xbox Live multiplayer game, go to Settings > Network in the Xbox app and check Server connectivity.
If it says Blocked, your PC was unable to establish a Teredo IPsec connection to the Quality of Service (QoS) server. If you also see Teredo is unable to qualify next to NAT type, visit the Teredo troubleshooting page first to resolve that issue. Then check to see if Server connectivity no longer shows Blocked.
Failure to establish a Teredo IPsec connection to the QoS server can occur when the Windows Firewall is disabled, when security software has altered the Windows Firewall configuration, or when required Windows services have been disabled or stopped. When your PC can’t establish a Teredo IPsec connection, you’ll be unable to use Xbox Live party chat service or do multiplayer gaming on Xbox Live.
Note Teredo IPsec connectivity is only necessary for Xbox Live party chat and multiplayer features. If your game doesn’t use the Xbox Live service, consult that game’s support site for help on chat and multiplayer issues.
Try the following solutions in order. Move on to the next one only if the previous one didn’t resolve the issue.
Solution 1: Make sure you have an Internet connection
- On your PC, launch the Xbox app.
- Select Settings > Network.
- Under Network status, make sure Internet connection says Connected.
If you don’t have an Internet connection, you’ll have to fix that before continuing with any additional troubleshooting.
Solution 2: Make sure Windows Firewall is enabled and that the default policy is active
Windows Firewall is required to establish a Teredo IPsec connection. Even if you use additional security software and firewalls, most of these will use Windows Firewall as a base. If for some reason your Windows Firewall has been disabled, you’ll have to enable it in order to use Xbox Live party chat and do multiplayer gaming.
To see if Windows Firewall is enabled:
- Enter Windows Firewall in the search field on your toolbar (Cortana).
- Select Windows Firewall from the search results.
- On the left side of the window, select Turn Windows Firewall on or off.
- If Turn off Windows Firewall is selected for your network type (public, private, or domain), select Turn on Windows Firewall, and then select OK.
You may need to restart your PC.
To see if the Windows Firewall default policy is enabled:
- Right-click the Start icon, and then select Command Prompt (Admin).
- Run the following command from the Admin command prompt:
netsh advfirewall show currentprofile
If the following output is present, the default policy is active:
Firewall Policy BlockInbound,AllowOutbound
- If the Inbound Policy is set to AllowInbound, Teredo will be unable to establish an IPsec connection to other PCs or Xbox One consoles. To reset the firewall policy to the default, run the following command from the Admin command prompt:
netsh advfirewall set currentprofile firewallpolicy blockinbound,allowoutbound
Solution 3: See if you’re using one of the following security software programs
In some cases, the security software programs listed below have been found to interrupt a PC’s ability to establish Teredo IPsec connections. If you have one of these security programs on your PC, make sure you’ve updated the software to the latest version, or see the program’s support documentation to determine how to enable Teredo IPsec connectivity with their software.
- Bit Defender Internet Security: Update to the latest version, or visit http://www.bitdefender.com/support/.
- AVG Internet Security: Update to the latest version, or visit https://support.avg.com/.
- Panda Internet Security 2015 and 2016: Update to the latest version, or visit http://www.pandasecurity.com/usa/homeusers/support/.
Solution 4: See if the Windows services required for Xbox Live party chat and multiplayer gaming have been changed from their default values
Four key services are required for Xbox Live party chat and multiplayer gaming to function on Windows 10. If any of these services have been disabled, you’ll need to re-enable them.
To see if the required Windows services are enabled:
- Enter Services in the search field on your toolbar (Cortana).
- Select Services from the search results.
- Check the Startup Type for the following services to ensure they’re set to their default values:
|Service Name||Default Startup Type|
|IKE and AuthIP IPsec Keying Modules||Automatic (Trigger Start)|
|Xbox Live Auth Manager||Manual|
|Xbox Live Networking Service||Manual|
If any of the services have been altered from their default values, you can set them back to their default values:
- In the Services application, double-click the service name that’s been changed.
- In the Properties window, select the default value from the Startup type drop-down list.
- Under Service Status, select Start.
- Select OK to save the changes.
Some applications reconfigure PC settings to try to optimize performance and will disable Windows services in the process, sometimes affecting one or more of the four services listed above. If you use one of these PC optimization applications, make note of any service configuration changes it makes, as you may need to revert those settings to use Xbox Live party chat and multiplayer gaming.
Was this article helpful?
Thank you for your feedback
Thanks for your feedback!
Provide feedback for this topic
Would you like to contact Support regarding the "Xbox app server connectivity on Windows 10 is blocked" issue you were reading about or a different issue?