Teams Online with “Direct Routing” Topology AppID?

[JamesMoffatt]

Using ExpressRoute today for O365 but moving to (Direct Internet Access) DIA to reduce backhauling enterpirse traffic. Obtained the requirements from MS, they are extensive. I don't see a specific AppID for Teams Direct Routing.

Anyone doing this today & any plans for AppID creation? 

[Brandon_Wertz]

@JamesMoffatt is all site traffic going to DIA?  If you're hoping to leverage O365 App-IDs for routing decisions in your firewall environment be ready for disappointment because that's not possible.  (Even if there were an app-id for the particular traffic you're looking for.)

[JamesMoffatt]

@Brandon_Wertz Thank you. No not all traffic only O365. We have regional iPOP's my intent is to leverage those as DIA points to MS. Today everything comes back East/West coast then to MS via ExpressRoute, thus providing poor performance to AISA for example. If we go DIA using AppID from the regional iPOP's I'm hoping to improve user experience & latancy. 

[Brandon_Wertz]

---

@JamesMoffatt wrote:

@Brandon_WertzThank you. No not all traffic only O365. ...

---

Sorry, this currently is not possible with any Palo platform.  You can NOT route based on the "traditional" applications you're wanting to.

You're best bet is to leverage minmeld currently creating an IP address group for what is considered "O365" and route traffic that way, but you can't use for instance "Sharepoint-Online" application as a routing decision.