How to Block O365 access for non corporate users?

[SubaMuthuram]

Hi Team,

What is the best way to block non corporate O365 access in palo alto ?

We have tried to block the predefined APP-ID office365-consumer-access but no luck because our Enterprises access also showing as office365-consumer-access. So it blocked all office access. 

Has anybody done this successfully in your environment? 

Thanks in advance. 

[Tate584]

---

Hi Team,

What is the best way to block non corporate O365 access in palo alto ?

We have tried to block the predefined APP-ID office365-consumer-access but no luck because our Enterprises access also showing as office365-consumer-access. So it blocked all office access. 

Has anybody done this successfully in your environment? 

Thanks in advance. 

networks.com/blog/2016/11/unrestricted-access-office-365-risky-heres-enable-safely/ 

[rmfalconer]

Have you looked at restricting to only your specific tenant? You need to decrypt traffic or this doesn't work but we've been using and it works as expected.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POJACA4