Office 365 filtering with Squid and SquidGuard

[Sweety]

Hello all,

I do SSL filtering within my network using the Squid and SquidGuard packages.
The only problem is that Office 365 and all Microsoft software like that works just half the time and that's annoying.
Do we have a solution to avoid this problem and avoid filtering Microsoft sites ?

Thank you :)

[Lalie]

@Sweety

Hello Have you found a solution because I have the same problem?

Thanks

[aGeekhere]

If you use SSL filtering, use splice and not bump for domains that have connection issues. Personally you should make it use splice by default and only use bump for domains which you need to decrypted. However if you must bump all websites be default then you have to splice all domains that have connection issues.

For Microsoft you can try splicing their domains listed here https://www.netify.ai/resources/applications/microsoft

[periko]

@Sweety Do mean, email office365?

[JonathanLee]

@periko make it custom and create a splice list for specific sites

(Custom Option enabled)

(Office is set to splice when it sees it)

I set office to splice.

This fixed my issues.

[periko]

@Sweety I normally bypass microsoft IPs from SQUID in MITM mode, is not necessary to check it with squid.

This list helps me:

https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide

I add this to a alias and latter I add this alias into squid bypass "Bypass Proxy for These Destination IPs" and let that alias pass by firewall rules.

Let me know if this helps u, regards!!!