Teams Traffic issue

[FWPalolearner]

Hello ,

 for one of our customer , they are facing slowness issue with MS teams . they identified issue with the ISP provider link

There is a Single Palo Alto gateway . The external interface is connected to a Switch ( L2) and the switch is further connected to Internet Router 

Now customer is planning to buy another ISP link ( high speed) .  

Requirement is that Microsoft Teams traffic flows through the new link . Can we achieve it ? may be using PBR using APP ID ?  because we cant add routes for MS teams towards new ISP  as it will be many IPs 

[FWPalolearner]

@BPry , @nikoolayy1  kindly suggest

[BPry]

@FWPalolearner,

You can use PBF and the ms-teams app-id to direct the traffic without issue. I'd actually monitor logs however and see if that app-id actually captures all Teams traffic, as it may not. Microsoft also publishes split-tunnel configuration information for Teams that you could use to set this up in a PBF that would likely work way better than relying on the app-id to route all traffic properly. 

[FWPalolearner]

Hello @BPry Thanks . Do you have that MS link for split tunnel . Actually this is not a VPN traffic . 

[BPry · Accepted solution]

@FWPalolearner 

https://docs.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-vpn-implement-split-tunnel?v...

It doesn't really matter that you aren't using the information provided for VPN traffic, the basic concept of what you are doing is the same. You just need the information to direct traffic through this secondary ISP through PBF.

[FWPalolearner]

Thanks a. Lot . Always very helpful