topic Office 365 access advice in General Topics

Office 365 access advice

scottsander — Wed, 23 Aug 2017 17:54:39 GMT

We are moving to Office 365 Exchange Online and may use some other Office 365 services in the near future such as SharePoint Online or OneDrive for Business.

I found the FAQ "Office 365 Access Control" and have configured the requisite custom application and a security policy rule; however, since we haven't fully rolled out TLS decryption yet, I'm decrypting on a service-by-service basis as required. This means I need to create a custom URL category object as well that represents the relevant URLs.

I have looked at Microsoft's list of Office 365 URLs and IP address ranges document. It's a beast, with information about both the URLs as well as the target IP address ranges, protocols, and port numbers.

Does anyone know of a guide anywhere that would help me get started, such as how many rules for this I will need to configure? Or is it more common for everyone to just put all the URLs in one big custom URL category and just let people access it at any destination IP address/range?

Re: Office 365 access advice

drewdown — Wed, 23 Aug 2017 19:10:12 GMT

Someone metioned MineMeld and O365..https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld/ta-p/120280

I dont use it but worth a look?

Re: Office 365 access advice

BPry — Wed, 23 Aug 2017 19:54:47 GMT

@scottsander,

MineMeld is what you'll want to confiugure here so that you can use the included miner to put the IPs and URLs into a EDL.

Re: Office 365 access advice

scottsander — Wed, 23 Aug 2017 21:42:16 GMT

I don't have MineMeld, but I'll look into setting it up.