Running Office 365 through McAfee Web Gateway

[shocko]

Looking to run Office 365 through our McAfee Web Gateway 8.x. I have a few questions:

1. We run our Proxy in Explicit mode. Will most 365 desktop apps support having an explicit proxy defined (i.e. Teams, Outlook 365 etc.)? 
2. It seems from reading that we need to disable SSL inspection for all categories of Office 365 except Default. Is this achieved with the ByPass rules  for Office 365?
3. Can we still apply user authentication if we do not use SSL inspection?
4. Any other issues running through the proxy we should consider?  

[aloksard]

Hi,

Hope you are doing well.

Yes this can be achieved using Bypass Microsoft (Office 365) Services rule set  from our rule set library.

Our recommendation is that the Office 365 bypass rule set be placed at the top of the policy so that all Office 365-related traffic is bypassed with no inspection or interference. This is in line with Microsoft's own best practice, which recommends that all Office 365 traffic be treated as follows:-

1. Ideally, send all Office 365 traffic directly to the internet and not through any proxy server
2. If this is unavoidable, exclude the traffic from any manipulation or content inspection

Microsoft's own guidance notes can be found here:-

https://docs.microsoft.com/en-us/office365/troubleshoot/miscellaneous/office-365-third-party-network...

For this reason, our rule set is designed to bypass Office 365 traffic from the whole policy, and therefore it must be placed at the top of the policy.

The rule set uses lists containing information published by Microsoft to ensure that only Office 365 traffic is bypassed - other traffic passes into the policy as normal.

Was my reply helpful? If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Regards

Alok Sarda