topic Re: URL Pattern in General Topics

URL Pattern

jeff6strings — Sun, 29 Oct 2017 19:26:29 GMT

We currently block the web mail category but I need to make an exception which I can place in our allow list. We need to allow outlook.com/domain.edu but not sure if I should use this full URL or if I do will it allow all of outlook.com or if I need to use a REGEX. I appreciate any help.

Jeff

Re: URL Pattern

reaper — Mon, 30 Oct 2017 09:45:40 GMT

hi @jeff6strings

outlook.com redirects to https://outlook.live.com/owa/ (free)

outlook.com/domain.edu redirects to https://outlook.office.com/owa (office365 business)

you should be ok by adding "outlook.com/domain.edu" _and_ "outlook.office.com" to the whitelist

Re: URL Pattern

jeff6strings — Mon, 30 Oct 2017 13:13:23 GMT

If I add outlook.office.com would that allow Outlook in general even if it is 365 business? I would like to keep webmail (even business and free) blocked and just allow the outlook.com/domain.edu.

Thanks for the reply.

Jeff

Re: URL Pattern

reaper — Mon, 30 Oct 2017 13:35:55 GMT

Hi @jeff6strings

not sure I follow 🙂

outlook is webmail 🙂 the outlook.com domain redirects to either the freeware outlook.live.com or to the 'business' outlook.office.com

so if you allow outlook,com , people would be able to get redirected to both the free and the business url, but if you then only allow the office one, the user would get a block page if they try to reach the live.com one

if you allow outlook.office.com, that would allow (your) corporate webmail, but theoretically also _other_ company corporate webmails (since you can't identify the company once you're in the OWA bit)

so you could prevent people from redirecting in the first place by only whitelisting outlook.com/company.tld but you'd need to allow outlook.office.com so anyone that knows to use that domain directly would still be able to get to their other webmail hosted on office365

hope this makes sense

Re: URL Pattern

jeff6strings — Mon, 30 Oct 2017 14:42:23 GMT

@reaper

That does make sense. We don't use any of the Outlook web but one of our customers has required us to use one of their accounts so we just need to narrow down access to outlook.com/domain.edu.

Thanks again.

Jeff