topic Re: M365 slowness via Prisma in Next-Generation Firewall Discussions

M365 slowness via Prisma

Sanjay_Ramaiah — Tue, 21 Mar 2023 12:04:52 GMT

Hi Team,

We are facing issues with the M365 via prisma. If we bypass prisma it feels better to access. If it is via Prisma it is pretty slow. Any suggestions on how to troubleshoot this issue.

Regards,

Sanjay S

Re: M365 slowness via Prisma

nikoolayy1 — Wed, 22 Mar 2023 10:01:52 GMT

Why ask this question in the NGFW section not the Prisma Access one?

Outside of that you may need to exclude some urls from decryption to speed things up 🙂

See:

https://live.paloaltonetworks.com/t5/automation-api-discussions/do-not-decrypt-ssl-traffic-for-office-365-and-zoom/td-p/359643

https://live.paloaltonetworks.com/t5/blogs/edl-hosting-service-helps-to-safely-enable-microsoft-365/ba-p/410972

Re: M365 slowness via Prisma

Sanjay_Ramaiah — Mon, 27 Mar 2023 11:31:56 GMT

Thank you Nikoolayy for the inputs. And sure will address these queries in Prisma Section in furture.

Just to understand one thing, Decrypt rule base should only consists of IPs and FQDNs right? how an i include the URLs?

Re: M365 slowness via Prisma

nikoolayy1 — Mon, 27 Mar 2023 15:54:42 GMT

The only thing you can do without decryption outside of fqdn/ip address is SNI:

How to identify url information on SSL traffic without decryption

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PObsCAG&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Re: M365 slowness via Prisma

NuvinG — Sat, 24 Feb 2024 18:18:17 GMT

I have noticed significant issue when users are for example connected via a gateway in Italy, UK or Spain and then goes through a service connection located in France.