Is there any risk to enable internet in SharePoint servers

Question

I got a critical certificate validation error ID 8321 in event viewer!

It took 300000 milliseconds and has exceeded the execution time thresholds.

I checked for a lot of solutions on the Internet but none seem to work for me.

One of the solution is enabling the internet access over on the SharePoint servers.

Is it risky to enable internet in SharePoint farm? If yes, then how can solve this critical error?

Answer 1

In short, Yes, it's risky!!

You can get more details at https://security.stackexchange.com

Have you tried to add the below entry to the hosts file?

172.0.0.1  crl.microsoft.com

Also, check the suggested workaround at

• Best Practices for CRL Checking on SharePoint Servers
• How Certificate Revocation Works

If all the above mentioned didn't help you, so at least try to only enable internet access to this URL crl.microsoft.com

Answer 2

It is not risky but it really depends if your customer is ok with this . Crl time outs are commonly fixed by exposing SharePoint servers to internet .