topic How to exclude Office 365 from SSL decryption? in General Topics

How to exclude Office 365 from SSL decryption?

Maxstr — Wed, 26 Jul 2017 15:44:25 GMT

Office 365 uses so many URL's, is there any way I can exclude it as an application?

Re: How to exclude Office 365 from SSL decryption?

Remo — Wed, 26 Jul 2017 16:03:07 GMT

Microsoft pushishes theis office 365 ip ranges here: https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US

With this list you have now multiple possibilities:

Configure them as address objects
Write them to a textfile on a webserver and import the ranges via EDL
Use a miner in Minemeld to automatically check for changes and present the list on minemeld for use as EDL (https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld/ta-p/120280)
Write a custom script to automatically update the addressobjects/EDL textfile

Re: How to exclude Office 365 from SSL decryption?

BPry — Thu, 27 Jul 2017 15:26:03 GMT

As @Remo already pointed out it's doable. I would highly recommend you look at MineMeld and use a miner for this function. Way easier than having to manually keep things up-to-date.