Reverse proxy for Outlook to Exchange

[OtakarKlier]

Hello,

Checking with the community if anyone has either tried this or is doing this. 

Scenario: Exchange on prem, external users using Outlook

Have the PAN reverse proxy the connection from the Outlook client, external to internal traffic, to the Exchange on prem environment. So have the PAN SSL decrypt the Outlook traffic, inspect it, reencrypt it, send to exchange.

Just checking before testing it.

Cheers!

[reaper]

hi @OtakarKlier 

Is there a reason you want to 'proxy' (ssl forward proxy) this connection as opposed to 'inline' (ssl inbound inspection) scan it?

Since you (should) have the server certificate, you can do inline scanning, which works very well and is actually faster/consumes less resources than proxy

inbound forward proxy should also work although i've never set it up that way 🙂

[OtakarKlier]

Hello,

Yeah I goofed and should have stated inbound SSL inspection. That is the way we would like to do it. I'll start reading up on it and see if there are any specific articles. Just wanted to see if there were those already doing this.

Thanks @reaper !

Cheers!

[reaper · Accepted solution]

I have it set up on a couple systems, pretty easy to set up 

import cert with key, create inbound decryption rule with cert, add cert profile for good measure, presto!

[OtakarKlier]

Cheers!