Fun with MS Office 365

[OtakarKlier]

Hello Community,

Has anyone found a way to allow access to a corp instance in o365 but block all other access? The idea would be so that a corp user can log into the corps instance, however block access to another companies or even personal instance.

Thoughts and suggestions are most welcome.

[aleksandar.astardzhiev]

Hi @OtakarKlier ,

I haven't had usecase so far, but isn't what you are looking for achieved with "HTTP Header Insertion" under URL Filtering profile

If you enable HTTP header insertion and the identified header is missing from a request, the firewall inserts the header. If the identified header already exists in the request, then the firewall overwrites the header values with the values that you specify.

Basically firewall will add HTTP headers any traffic to Office365 that effectively will redirect users only to the defined Tenent and user shouldn't be able to login to anything different.

[OtakarKlier]

Hello,

Thanks for the reply. I think the answer is maybe. I dont know enough about O365 to see how it behaves and what each tenant looks like.

I'll try it once we are all setup. Bigger problem is those who access it while not on the VPN :(. Always on is something I'm trying the company to accept.

Regards,

[SubaMuthuram]

Hi Otakar,

Have tried this? Or any other method have you found ?

[OtakarKlier]

Hello,

Not yet. Our instance is not 100% configured yet. I will post a writeup after my testing. However if anyone has any guidance, I'm all ears.

Regards,

[SubaMuthuram]

I have tried this and it is working fine for me. 

[OtakarKlier]

Hello @SubaMuthuram ,

Would you be willing to share how you accomplished this? Also examples and screen shots (redacted)?

Regards,