No SSL decrypt collaboration

[ZEBIT]

When we try to setup an Skype for Business call we always get blocked by the SSL decrypt of the Palo Alto system.

I would like to configure no ssl decrypt for collaboration. Is this possible and how?

[TranceforLife]

Hi,

My guess you can configure another policy for the particular application with "No Decrypt" option and put it above your existing decryption policy.

[ZEBIT]

That is the strange part, there is no URL category from palo alto to not decrypt collaboration.

If I check some url's to setup meetings in the url check of Palo Alto it tells me the category computer and internet info.

But if I make a no decrypt rule on this all other applications that are under this category are also not decrypted.

[TranceforLife]

Hi,

How do you see that traffic in the logs? How it is identified by Palo. If you can post a logs snapshot from the device for that particular session

[santonic]

It's mixed, internet-and-computer-info, internet-commincations-and-telephony... No good way to make exception for Skype.

[BPry]

To add on this because of the way that Skype opperates there will likely never be a good way to not decrypt Skype traffic and make it identify properly.