How to setup no decrypt for Office365 and Lync

[ZEBIT]

I would like to set a no decrypt policy for the applications ms-Office365 and ms-lync. But the only option in no decrypt is for URL category. How can I configure the no decrypt?

[kiwi · Accepted solution]

Hi,

You can create a Custom URL Category containing all of the Office365 URL's and IP ranges and use that custom category for the no decrypt policy.  If SNI and/or certificate CN match then it should pick up this info :

Office 365 URLs and IP address ranges

-Kim.

[Arne-VDH]

Quick bump, have you verified this solution? Specifying the MS URL's in the no decryption policy to allow Lync?

Am I correct that when using App-ID (for MS-Lync), SSL decryption will be required (and probably eating up a lot of my available sessions)?

If so it would seem pretty obvious to use the MS URL's and let App-ID be for what it is, or what other disadvantage am I missing?

[Jean-BrunoEmonet]

Hi,

It works fine for me with the following URLs in a custom category used in no decryption rule:

*.lync.com
*.cqd.lync.com
*.infra.lync.com
*.online.lync.com
*.resources.lync.com
*.config.skype.com
*.skypeforbusiness.com
*.pipe.aria.microsoft.com
config.edge.skype.com
pipe.skype.comaddress ranges

From:

https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-ab...