topic How to inspect email contents within outlook.office365.com? in General Topics

How to inspect email contents within outlook.office365.com?

SThatipelly — Mon, 03 Aug 2020 19:51:35 GMT

I have decryption turned ON for outlook.office365.com url but firewall cannot really inspect the contents that are inside the email. Is it because Microsoft encrypts the email and Palo doesn't know how to decrypt it? has anyone tried decrypting outlook email traffic and successfully log the data files inside them?

Re: How to inspect email contents within outlook.office365.com?

Remo — Sun, 09 Aug 2020 17:28:10 GMT

Hi @SThatipelly

What PAN-OS version do you have installed? It could be related to the protocol http/2 and because of that the firewall does not unterstand it and cannot see and block/log files.

Maybe it is the same with a case that I have opened some months ago where a firewall on PAN-OS 8.1 was not able to block files on a specific website. What the exact reason was I would have to check again, but at least this one isn't fixed in PAN-OS 9.1.

Re: How to inspect email contents within outlook.office365.com?

SThatipelly — Tue, 11 Aug 2020 13:16:46 GMT

@Remo I'm running 9.0