topic Re: Problems with ms lync / url filtering in General Topics

Problems with ms lync / url filtering

johan.boeckx — Mon, 25 May 2015 21:29:33 GMT

Hi all,

I am trying to get lync2013 working, and more specifically Skype for Business, successor of Lync. I have Lync 2013 completely working, but I would like to permit all the wildcards permitted through url filtering, linked to a number of applications as Stun, ssl, mslync,... After this rule , there are also other url filtering rules, for example for all other users, going to internet.

The list I am talking about is :

*.microsoftonline.com

*.microsoftonline-p.com

*.onmicrosoft.com

*.sharepoint.com

*.outlook.com

*.lync.com

*.verisign.com

*.verisign.net

*.public-trust.com

sa.symcb.com

I tried with security profile, with an allowed url_categorie, for ex. 'Microsoft permitted sites' with the wildcards in, but problem is that in that case, I have to block all categories, otherwise all categories are permitted. Blocking is also no option, since then users can only go to the defined sites and nothing else. Anybody an idea ?

thanks

Re: Problems with ms lync / url filtering

hyadavalli — Tue, 26 May 2015 16:12:22 GMT

Hello,

Create security policy with with your custom categories in the service column instead of applying as security profile.

Regards,

Hari Yadavalli

Re: Problems with ms lync / url filtering

johan.boeckx — Tue, 02 Jun 2015 17:04:15 GMT

Thanks Hyadavall, but I tried that. What I did was creating custom url_categorie, and put here all the *.microsoft sites in it. This category I applied in the rule and added as url category in the policy. I don't think I can add a customer url category as service, like you said. Problem is that not only the traffic to the microsoft sites seems to be allowed, but also all the traffic going to untrust, which has no url category, and translated as any. 23.101.14.229 is ip of a newspaper.

greetz,

Johan

Re: Problems with ms lync / url filtering

pulukas — Wed, 03 Jun 2015 00:25:09 GMT

For SSL sites you will need to enable decryption to read the url and apply any url filtering policy.