topic Re: Reverse proxy for Outlook to Exchange in General Topics

Reverse proxy for Outlook to Exchange

OtakarKlier — Thu, 29 Oct 2020 17:22:33 GMT

Hello,

Checking with the community if anyone has either tried this or is doing this.

Scenario: Exchange on prem, external users using Outlook

Have the PAN reverse proxy the connection from the Outlook client, external to internal traffic, to the Exchange on prem environment. So have the PAN SSL decrypt the Outlook traffic, inspect it, reencrypt it, send to exchange.

Just checking before testing it.

Cheers!

Re: Reverse proxy for Outlook to Exchange

reaper — Thu, 29 Oct 2020 23:08:23 GMT

hi @OtakarKlier

Is there a reason you want to 'proxy' (ssl forward proxy) this connection as opposed to 'inline' (ssl inbound inspection) scan it?

Since you (should) have the server certificate, you can do inline scanning, which works very well and is actually faster/consumes less resources than proxy

inbound forward proxy should also work although i've never set it up that way 🙂

Re: Reverse proxy for Outlook to Exchange

OtakarKlier — Fri, 30 Oct 2020 14:26:52 GMT

Hello,

Yeah I goofed and should have stated inbound SSL inspection. That is the way we would like to do it. I'll start reading up on it and see if there are any specific articles. Just wanted to see if there were those already doing this.

Thanks @reaper !

Cheers!

Re: Reverse proxy for Outlook to Exchange

reaper — Fri, 30 Oct 2020 16:34:04 GMT

I have it set up on a couple systems, pretty easy to set up

import cert with key, create inbound decryption rule with cert, add cert profile for good measure, presto!

Re: Reverse proxy for Outlook to Exchange

OtakarKlier — Fri, 30 Oct 2020 16:43:06 GMT

Cheers!