How to exclude Office 365 from SSL decryption?

[Maxstr]

Office 365 uses so many URL's, is there any way I can exclude it as an application? 

[Remo · Accepted solution]

Microsoft pushishes theis office 365 ip ranges here: https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-ab...

With this list you have now multiple possibilities:

• Configure them as address objects
• Write them to a textfile on a webserver and import the ranges via EDL
• Use a miner in Minemeld to automatically check for changes and present the list on minemeld for use as EDL (https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-usi...)
• Write a custom script to automatically update the addressobjects/EDL textfile

[BPry]

As @Remo already pointed out it's doable. I would highly recommend you look at MineMeld and use a miner for this function. Way easier than having to manually keep things up-to-date.