topic How to setup no decrypt for Office365 and Lync in General Topics

How to setup no decrypt for Office365 and Lync

ZEBIT — Tue, 17 Nov 2015 07:44:37 GMT

I would like to set a no decrypt policy for the applications ms-Office365 and ms-lync. But the only option in no decrypt is for URL category. How can I configure the no decrypt?

Re: How to setup no decrypt for Office365 and Lync

kiwi — Tue, 17 Nov 2015 09:38:30 GMT

Hi,

You can create a Custom URL Category containing all of the Office365 URL's and IP ranges and use that custom category for the no decrypt policy. If SNI and/or certificate CN match then it should pick up this info :

Office 365 URLs and IP address ranges

-Kim.

Re: How to setup no decrypt for Office365 and Lync

Arne-VDH — Fri, 08 Jan 2016 16:27:42 GMT

Quick bump, have you verified this solution? Specifying the MS URL's in the no decryption policy to allow Lync?

Am I correct that when using App-ID (for MS-Lync), SSL decryption will be required (and probably eating up a lot of my available sessions)?

If so it would seem pretty obvious to use the MS URL's and let App-ID be for what it is, or what other disadvantage am I missing?

Re: How to setup no decrypt for Office365 and Lync

Jean-BrunoEmonet — Wed, 04 Oct 2017 15:32:36 GMT

Hi,

It works fine for me with the following URLs in a custom category used in no decryption rule:

*.lync.com
*.cqd.lync.com
*.infra.lync.com
*.online.lync.com
*.resources.lync.com
*.config.skype.com
*.skypeforbusiness.com
*.pipe.aria.microsoft.com
config.edge.skype.com
pipe.skype.comaddress ranges

From:

https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-35Office 365 URLs and IP address ranges