Excluding MS Teams from GlobalProtect

[securehops]

I'm trying to exclude MS Teams traffic from GlobalProtect.  We are using the entire O365 platform but I only want to exclude MS Teams.  Has anyone been able to successfully get this to work?  I found some older community posts but most seemed to have inconsistent results.   I'm running PAN OS 9.0.x and GP 5.2.6.

Is excluding  "%LOCALAPPDATA%\Microsoft\Teams\current\Teams.exe"  supported and would that be all that is needed? 

I tried something similar with Zoom but when zoom was installed into %USERPROFILE%\AppData\Roaming\Zoom, it did not work.  I had to install zoom into C:\Program Files (x86)\Zoom to get that to exclude correctly

[securehops]

Thanks for the info.  Based on some of the URLs you posted, there are exclusions other than MS Teams in there, which I can't have

So far, I have only excluded these optimized ranges 13.107.64.0/18 ,52.112.0.0/14,52.120.0.0/14.   Seems to be working okay for the most part, although I still see a little traffic for IPs within these ranges on the firewall

[JoergSchuetter]

The traffic you are seeing stems from the fact that MS-Teams sends connection probes via all interfaces (GP-Interface and LAN-Interface). It will pick the interface it identifies as "better".

[securehops]

Good point!