Hangout as ms-lync

Reply
Highlighted
L3 Networker

Hangout as ms-lync

Hello everyone,

 

the users in our company use Google Hangouts / Meet. We allowed google-hangouts and google-meet and all the dependent applications with Service Any.

However the connection is recognized as ms-lync!!

 

Anyone else facing similar issue?

 

Best Regards,

RJ

Highlighted
Cyber Elite

@rjdahav163,

That seems kind of odd. Are you decrypting traffic at all or not? 

Highlighted
L3 Networker

@BPry

 

Nope.. Not at all...

Highlighted
Cyber Elite

@rjdahav163,

That's  going to be the main cause of your issue. When the firewall can't see all of the traffic it can only look at certain parts of the signatures and can't reliably identify some applications. When not decrypting the way the ms-lync applications currently configured you'll see more false-positives. Google traffic is actually a fairly difficult thing to identify when you aren't decrypting any of the traffic. 

What signature are you specifically seeing, ms-lync-audio or ms-lync-base? 

Highlighted
L3 Networker

Yeah.. decryption is not allowed for us. So that is a problem.

In the logs we just see ms-lync. No sub-application like ms-lync-base or -video.

Highlighted
Cyber Elite

@rjdahav163,

You can open a support ticket on the issue and hope that the next round of App-ID signature updates addreses the issue with a signature modifcation. Real issue with this however is that if you aren't decrypting (I get it, some environments simply can't do this for multiple reasons) the firewalls App-ID process really is a 'best effort' process. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!