Web Appliance - blocking web-based email prevents access to login.live.com which is used by other features

There are several ways to accomplish this depending on your policy.

You could create a user agent string and allow the site based on that.  (ie Office)

Use application control

create an additional policy (tag and allow it) then apply the tag to a local site list entry for live.com.  (this would allow all subdomains but also allow browsers)

there is also a security toggle that will disable web based email. 

from what yout has posted as requirements.. you want option #2

create and additional policy

select the users or ad group 

next until you get to the tag section

select the action of allow and add it so it shows up under the input box

next

apply policy from machines connecting anywhere

name it - live email

save it

then under the local site list entry

create a new one for live.com

under tags select the tag you just made

save it

result:

this will allow you to continue to block web based email in your default policy .. the users in the "tag" will over ride the default policy for live.com but still be applied to gmail or hotmail.

There are several ways to accomplish this depending on your policy.

You could create a user agent string and allow the site based on that.  (ie Office)

Use application control

create an additional policy (tag and allow it) then apply the tag to a local site list entry for live.com.  (this would allow all subdomains but also allow browsers)

there is also a security toggle that will disable web based email. 

from what yout has posted as requirements.. you want option #2

create and additional policy

select the users or ad group 

next until you get to the tag section

select the action of allow and add it so it shows up under the input box

next

apply policy from machines connecting anywhere

name it - live email

save it

then under the local site list entry

create a new one for live.com

under tags select the tag you just made

save it

result:

this will allow you to continue to block web based email in your default policy .. the users in the "tag" will over ride the default policy for live.com but still be applied to gmail or hotmail.